CVE-2022-38116

Le-yan Co., Ltd. Personnel and Salary Management System - Hard-coded password

State: Published
Severity: 9.8 Critical
Published: Aug 30, 2022
Updated: Sep 16, 2024
Reserved: Aug 10, 2022

Description

Le-yan Personnel and Salary Management System has hard-coded database account and password within the website source code. An unauthenticated remote attacker can access, modify system data or disrupt service.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	twcert

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
Personnel and Salary Management SystemLe-yan Co., Ltd.	2022/6/6 and earlierAffected

References

https://www.twcert.org.tw/tw/cp-132-6460-2bb02-1.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.