PT-2013-4434
CVE-2013-3499
·
تاريخ النشر
2013-05-08
·
تاريخ التحديث
2013-11-25
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
GroundWork Monitor Enterprise version 6.7.0
Description
The issue allows remote attackers to gain administrative privileges or access files by crafting a specific HTTP header.
Recommendations
For GroundWork Monitor Enterprise version 6.7.0, consider modifying the authentication mechanism to not rely solely on the HTTP Referer header, as a temporary workaround, until a patch is available. Restrict access to sensitive areas of the application to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾