PT-2017-13768
CVE-2017-14943
·
تاريخ النشر
2017-10-10
·
تاريخ التحديث
2017-11-05
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Trapeze TransitMaster (affected versions not specified)
Description
The issue allows for information disclosure, including emails and hashed passwords, through a modified
userID field in JSON data sent to the "ManageSubscriber.aspx/GetSubscriber" API endpoint. This software is deployed independently at multiple municipal transit systems.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾