What’s Vulnerable › Vulnerabilities

CVE-2017-1000192

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-17 · updated 2026-06-17

Description

Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the configuration files that contain the login and password from the database, private encryption key, as well as other sensitive information.

Affected products

• Cygnux Syspass: through 2.1.7

References

• https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901
• https://github.com/nuxsmin/sysPass/releases/tag/2.1.8.17042901

Get alerted when CVE-2017-1000192 or the next vulnerability affects your stack