PT-2006-7198
CVE-2006-6596
·
تاريخ النشر
2006-12-15
·
تاريخ التحديث
2018-10-17
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
HyperAccess version 8.4
Description
The issue allows remote attackers to execute arbitrary vbscript and commands via a session file, which can be automatically opened using Internet Explorer.
Recommendations
For HyperAccess version 8.4, consider disabling the automatic opening of session files in Internet Explorer as a temporary workaround until a patch is available. Restrict access to .HAW files to minimize the risk of exploitation. Avoid using Internet Explorer to open untrusted session files until the issue is resolved.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾