DATAGERRY 漏洞列表

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests.

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.

Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests.

The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.

Datagerry was using default username and password was discovered.

DATAGERRY 是一个开源的、基于Web的数据库管理工具，它提供了一个用户友好的界面，用于管理和操作各种类型的数据库。DATAGERRY旨在简化数据库管理任务，使得即使是没有深厚数据库知识的用户也能够轻松地进行数据的查询、编辑和管理。DATAGerry 2.2.0 及之前版本中的接口中RESTAPI端点存在未授权访问漏洞，攻击者无需身份验证即可远程访问该端点，导致敏感信息泄露。该漏洞可能暴露用户权限配置等关键数据，进一步引发权限提升或系统完整性破坏。