الباحثون
رجوع
Pierluca De Santis
#28998
من 60,462
9.8
إجمالي CVSS
الثغرات
·
1
PT-2018-18794
2018-03-29
9.8
CVE-2018-9031
Tnlsoftsolutions
Tnlsoftsolutions Sentry Vision
The issue concerns the login interface, which discloses passwords by allowing access to an "if(pwd ==" line in the HTML source code. This effectively means that authentication occurs only on the client side.