CVE-2021-25898 Hardcoded credentials in n/a
Hardcoded high-privileged credentials in source code allow attackers to authenticate and gain unauthorized access to the application.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-25898?
CVE-2021-25898 is a high-severity vulnerability in n/a, published on 23 Apr 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored in unencrypted source-code text files. This was noted when accessing the svc-login.php file. The value is used to authenticate a high-privileged user upon authenticating with the server.
Which versions are affected by CVE-2021-25898?
It affects 1 product.
Products include Void Aural Rec Monitor.
How do I fix CVE-2021-25898?
No fix has been published for CVE-2021-25898 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-25898 being exploited?
There is no known exploitation of CVE-2021-25898 in the wild and no public exploit code.
Sources
Also known as GHSA-hc9c-2qcw-ghq4.