Vulnerability in Basware Banking

CVE-2015-6743

Basware Banking (Maksuliikenne) 8.90.07.X uses a hardcoded password for an unspecified account, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password. NOTE: this identifier was SPLIT from CVE-2015-0942 per ADT2 and ADT3 due to different vulnerability types and different affected versions.

EPSS: 0.011 (63.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References