Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-35965

Learningdigital.com, Inc. Orca HCM - Hard-code password

Description

The Orca HCM digital learning platform uses a weak factory default administrator password, which is hard-coded in the source code of the webpage in plain text, thus remote attackers can obtain administrator’s privilege without logging in.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Learningdigital.com, Inc. Orca HCM

  • unspecified to ≤ 10.0affected

References