ThingsBoard 3.4.1 could allow a remote malicious user to gain elevated privileges because hard-coded service credentials (usable for privilege escalation) are stored in an insecure format. (To read this stored data, the attacker needs access to the application server or its source code.)
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
thingsboard thingsboard 3.4.1 |
Vulmon