CVE-2025-1100

A CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to execute arbitrary code with root privileges via SSH.

A CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to execute arbitrary code with root privileges via SSH.

Un CWE-259 "Uso de contraseña codificada" para la cuenta raíz en Q-Free MaxTime menor o igual a la versión 2.11.0 permite a un atacante remoto no autenticado ejecutar código arbitrario con privilegios de superusuario a través de SSH.