CVE-2019-25021 Hardcoded credentials in n/a
Attackers can access the OrientDB database using hardcoded admin credentials, allowing unauthorized data access and modification in Scytl sVote.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-25021?
CVE-2019-25021 is a high-severity vulnerability in n/a, published on 27 Feb 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.
Weakness: CWE-798
Which versions are affected by CVE-2019-25021?
It affects 1 product.
Products include Scytl Secure Vote.
How do I fix CVE-2019-25021?
No fix has been published for CVE-2019-25021 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-25021 being exploited?
There is no known exploitation of CVE-2019-25021 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-hrvc-r9q5-cgjx.