{ "schema_version": "1.4.0", "id": "GHSA-5wp8-cmr8-3522", "modified": "2022-05-14T03:47:22Z", "published": "2022-05-14T03:47:22Z", "aliases": [ "CVE-2018-5266" ], "details": "Cobham Sea Tel 121 build 222701 devices allow remote attackers to obtain potentially sensitive information about valid usernames by reading the loginName lines at the js/userLogin.js URI. NOTE: default passwords for the standard usernames are listed in the product's documentation: Dealer with password seatel3, SysAdmin with password seatel2, and User with password seatel1.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5266" }, { "type": "WEB", "url": "http://misteralfa-hack.blogspot.cl/2018/01/seatelcobham-terminales-satelitales.html" } ], "database_specific": { "cwe_ids": [ "CWE-200" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-01-08T03:29:00Z" } }