PT-2015-3652

CVE-2014-10008

·

تاريخ النشر

2015-01-13

·

تاريخ التحديث

2017-09-08

الوصف من

CVSS 2.0
6.8
متوسطة
المقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Stark CRM version 1.0
Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This can be achieved through crafted requests to specific pages, including the admin page, agent page, sub agent page, partner page, or client page.
Recommendations For Stark CRM version 1.0, consider disabling the affected pages temporarily to minimize the risk of exploitation. Restrict access to these pages until a fix is available. Avoid using the affected functionality in the admin, agent, sub agent, partner, and client pages until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾