PT-2017-8509
CVE-2016-4504
·
تاريخ النشر
2017-03-21
·
تاريخ التحديث
2017-03-24
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Meteocontrol WEB'log Basic versions all
Meteocontrol WEB'log Light versions all
Meteocontrol WEB'log Pro versions all
Meteocontrol WEB'log Pro Unlimited versions all
Description
A Cross-Site Request Forgery issue was found, where no CSRF Token is generated per page or per function, allowing for potential exploitation.
Recommendations
For Meteocontrol WEB'log Basic, consider implementing a CSRF token generation mechanism per page or per function as a mitigation measure.
For Meteocontrol WEB'log Light, consider implementing a CSRF token generation mechanism per page or per function as a mitigation measure.
For Meteocontrol WEB'log Pro, consider implementing a CSRF token generation mechanism per page or per function as a mitigation measure.
For Meteocontrol WEB'log Pro Unlimited, consider implementing a CSRF token generation mechanism per page or per function as a mitigation measure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾