Wapples vulnerabilities

2 known vulnerabilities in Wapples from Pentasecurity. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Wapples: Use of Hard-coded Credentials

  CVE-2022-35582Sep 13, 2022Pentasecurity

  Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control. The operating system that WAPPLES runs on has a built-in non-privileged user penta with a predefined password. The password for this user, as well as its ex

• 9.8 Critical severity

  Wapples: Use of Hard-coded Credentials

  CVE-2022-35413Sep 13, 2022PentasecurityEPSS 19.1%

  WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use this account to access the system configuration and confidential information (such as SSL keys) via an HTTPS request to the /webapi/ URI on port 443 or 5001.