CVE-2023-36140 Weak cryptography in n/a
Attackers can access all user accounts because passwords are stored without encryption in the Cleaning Business Software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-36140?
CVE-2023-36140 is a critical vulnerability in n/a, published on 11 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts.
Weakness: CWE-862
Which versions are affected by CVE-2023-36140?
It affects 1 product.
Products include Phpjabbers Cleaning Business Software.
How do I fix CVE-2023-36140?
No fix has been published for CVE-2023-36140 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-36140 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-36140 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-rp33-8597-jc3x.