Insufficient file permissions leak user credentials of 3rd party integration interfaces in AXIS License Verifier ACAP
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.4epss 0.6%
exploitation probability
0.6%top 53% of all CVEs
observed exploitation
nono source reports it
Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials
that are used in the integration interface towards 3rd party systems.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Axis Communications AB · AXIS License Plate Verifier