CVE-2023-3237
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
A critical vulnerability was found in OTCMS up to version 6.62, affecting unknown code. Manipulating the username/password argument with the input admin leads to the use of a hard-coded password.
Risk Assessment
This vulnerability may be exploited by attackers, posing a serious threat to the security of the system and user data.
Recommendation
It is recommended to update OTCMS to the latest version to eliminate this vulnerability and to monitor the system for unauthorized access.
Original NVD description (English source)
A vulnerability classified as critical was found in OTCMS up to 6.62. This vulnerability affects unknown code. The manipulation of the argument username/password with the input admin leads to use of hard-coded password. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231508.