CVE-2024-0188

Published Jan 2, 2024

Last updated 23 days ago

Overview

Description
A vulnerability, which was classified as problematic, was found in RRJ Nueva Ecija Engineer Online Portal 1.0. This affects an unknown part of the file change_password_teacher.php. The manipulation leads to weak password requirements. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-249501 was assigned to this vulnerability.
Source
cna@vuldb.com
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
8.1
Impact score
5.9
Exploitability score
2.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

CVSS 2.0

Type
Secondary
Base score
2.1
Impact score
2.9
Exploitability score
3.9
Vector string
AV:N/AC:H/Au:S/C:P/I:N/A:N

Weaknesses

cna@vuldb.com
CWE-521

Social media

Hype score
Not currently trending

Configurations