CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
What the vulnerability does
Use of Hard-coded Credentials vulnerability in Addi Addi – Cuotas que se adaptan a ti buy-now-pay-later-addi allows Password Recovery Exploitation.This issue affects Addi – Cuotas que se adaptan a ti: from n/a through <= 2.0.4.
Explanation of Vulnerability in Simple Terms
Addi – Cuotas que se adaptan a ti versions 2.0.4 and earlier contain a hardcoded credential vulnerability. An attacker with network access can use embedded credentials to gain unauthorized access to the application without authentication. This affects the integrity of data and system operations.
What an attacker can do
Gain unauthorized access to the application using hardcoded credentials embedded in the product.
Potential impact on your site
Attackers can modify or tamper with data and system configuration without needing valid user credentials.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
