Back

Query hashed password via QueryBuilder Servlet

Published on
10 Jan 2022
Vulnerability

Description

  • QueryBuilder is a User Interface component to create queries and filters.
  • Misconfigured AEM applications can cause many critical vulnerabilities. It is possible to fetch Query hashed password via QueryBuilder Servlet

Recommendation

  • Access restriction should be applied.
Automated human-like penetration testing for your web apps & APIs
Teams using Beagle Security are set up in minutes, embrace release-based CI/CD security testing and save up to 65% with timely remediation of vulnerabilities. Sign up for a free account to see what it can do for you.
Product tour
Experience the Beagle Security platform
Unlock one full penetration test and all Advanced plan features free for 10 days
Start free trial
Find surface-level website security issues in under a minute
Free website security assessment
Experience the power of automated penetration testing & contextual reporting.
Product tour