PT-2017-7734
CVE-2016-10101
·
تاريخ النشر
2017-01-23
·
تاريخ التحديث
2017-03-15
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Hitek Software's Automize versions 10.x through 11.x
Description
Information Disclosure can occur due to users having the Read attribute, which allows an attacker to recover the encrypted password and access the Password Manager.
Recommendations
For versions 10.x through 11.x, consider restricting access to the passManager.jsd file to minimize the risk of exploitation. As a temporary workaround, limit the Read attribute for users to prevent unauthorized access to the Password Manager.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾