mirror of
https://github.com/0xMarcio/cve.git
synced 2025-11-28 18:48:49 +00:00
19 lines
688 B
Markdown
19 lines
688 B
Markdown
|
### [CVE-2024-55557](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-55557)
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
### Description
|
||
|
|
|
||
|
|
ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials.
|
||
|
|
|
||
|
|
### POC
|
||
|
|
|
||
|
|
#### Reference
|
||
|
|
- https://www.partywave.site/show/research/CVE-2024-55557%20-%20Weasis%204.5.1
|
||
|
|
|
||
|
|
#### Github
|
||
|
|
- https://github.com/partywavesec/CVE-2024-55557
|
||
|
|
- https://github.com/tylzars/awesome-vrre-writeups
|
||
|
|
|