Duty Analyst: Joseph McCarthy

CVE-2026-48242

Published: 2026-05-21 18:16:21 | Last modified: 2026-07-23 16:10:00

CRITICAL CVSS 9.2
No EPSS data

Description

Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values that may match deployed installations.

CVSS details

Severity
critical
Score
9.2
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

This CVE is not currently listed in the EPSS dataset.

Show JSON
{
    "cve": {
        "id": "CVE-2026-48242",
        "cveTags": [],
        "metrics": {
            "ssvcV203": [
                {
                    "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "ssvcData": {
                        "id": "CVE-2026-48242",
                        "role": "CISA Coordinator",
                        "options": [
                            {
                                "exploitation": "none"
                            },
                            {
                                "automatable": "no"
                            },
                            {
                                "technicalImpact": "total"
                            }
                        ],
                        "version": "2.0.3",
                        "timestamp": "2026-05-23T02:24:09.524644Z"
                    }
                }
            ],
            "cvssMetricV31": [
                {
                    "type": "Secondary",
                    "source": "disclosure@vulncheck.com",
                    "cvssData": {
                        "scope": "UNCHANGED",
                        "version": "3.1",
                        "baseScore": 8.1,
                        "attackVector": "NETWORK",
                        "baseSeverity": "HIGH",
                        "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                        "integrityImpact": "HIGH",
                        "userInteraction": "NONE",
                        "attackComplexity": "HIGH",
                        "availabilityImpact": "HIGH",
                        "privilegesRequired": "NONE",
                        "confidentialityImpact": "HIGH"
                    },
                    "impactScore": 5.9,
                    "exploitabilityScore": 2.2
                }
            ],
            "cvssMetricV40": [
                {
                    "type": "Secondary",
                    "source": "disclosure@vulncheck.com",
                    "cvssData": {
                        "Safety": "NOT_DEFINED",
                        "version": "4.0",
                        "Recovery": "NOT_DEFINED",
                        "baseScore": 9.2,
                        "Automatable": "NOT_DEFINED",
                        "attackVector": "NETWORK",
                        "baseSeverity": "CRITICAL",
                        "valueDensity": "NOT_DEFINED",
                        "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                        "exploitMaturity": "NOT_DEFINED",
                        "providerUrgency": "NOT_DEFINED",
                        "userInteraction": "NONE",
                        "attackComplexity": "HIGH",
                        "attackRequirements": "NONE",
                        "privilegesRequired": "NONE",
                        "subIntegrityImpact": "NONE",
                        "vulnIntegrityImpact": "HIGH",
                        "integrityRequirement": "NOT_DEFINED",
                        "modifiedAttackVector": "NOT_DEFINED",
                        "subAvailabilityImpact": "NONE",
                        "vulnAvailabilityImpact": "HIGH",
                        "availabilityRequirement": "NOT_DEFINED",
                        "modifiedUserInteraction": "NOT_DEFINED",
                        "modifiedAttackComplexity": "NOT_DEFINED",
                        "subConfidentialityImpact": "NONE",
                        "vulnConfidentialityImpact": "HIGH",
                        "confidentialityRequirement": "NOT_DEFINED",
                        "modifiedAttackRequirements": "NOT_DEFINED",
                        "modifiedPrivilegesRequired": "NOT_DEFINED",
                        "modifiedSubIntegrityImpact": "NOT_DEFINED",
                        "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                        "vulnerabilityResponseEffort": "NOT_DEFINED",
                        "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                        "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                        "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                        "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
                    }
                }
            ]
        },
        "affected": [
            {
                "source": "disclosure@vulncheck.com",
                "affectedData": [
                    {
                        "vendor": "Open ISES",
                        "product": "Tickets",
                        "versions": [
                            {
                                "status": "affected",
                                "version": "0",
                                "lessThan": "3.44.2",
                                "versionType": "semver"
                            }
                        ],
                        "defaultStatus": "unaffected"
                    }
                ]
            }
        ],
        "published": "2026-05-21T18:16:21.220",
        "references": [
            {
                "url": "https://github.com/openises/tickets/commit/ecfeb406a016766cae81c749e14b5145a9f2dbff",
                "source": "disclosure@vulncheck.com"
            },
            {
                "url": "https://github.com/openises/tickets/releases/tag/v3.44.2",
                "source": "disclosure@vulncheck.com"
            },
            {
                "url": "https://www.vulncheck.com/advisories/open-ises-tickets-hardcoded-mysql-credentials-in-import-mdb-php",
                "source": "disclosure@vulncheck.com"
            }
        ],
        "vulnStatus": "Deferred",
        "weaknesses": [
            {
                "type": "Secondary",
                "source": "disclosure@vulncheck.com",
                "description": [
                    {
                        "lang": "en",
                        "value": "CWE-798"
                    }
                ]
            }
        ],
        "descriptions": [
            {
                "lang": "en",
                "value": "Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration values that may match deployed installations."
            },
            {
                "lang": "es",
                "value": "Open ISES Tickets anterior a la versi\u00f3n 3.44.2 contiene credenciales de conexi\u00f3n a la base de datos MySQL codificadas de forma r\u00edgida (host, nombre de usuario, contrase\u00f1a, nombre de la base de datos) en import_mdb.php. Las credenciales est\u00e1n incrustadas en el c\u00f3digo fuente comprometido con el repositorio p\u00fablico, permitiendo a cualquier lector del c\u00f3digo fuente obtener valores de configuraci\u00f3n v\u00e1lidos que pueden coincidir con instalaciones desplegadas."
            }
        ],
        "lastModified": "2026-07-23T16:10:00.137",
        "sourceIdentifier": "disclosure@vulncheck.com"
    }
}