PT-2018-12786
CVE-2018-14901
·
تاريخ النشر
2018-08-30
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
EPSON iPrint application version 6.6.3
Description
The issue concerns the presence of hard-coded API and Secret keys for various cloud services, including Dropbox, Box, Evernote, and OneDrive, within the application. This could potentially expose user data to unauthorized access.
Recommendations
For EPSON iPrint application version 6.6.3, consider removing or securely storing the hard-coded API and Secret keys for the Dropbox, Box, Evernote, and OneDrive services to prevent unauthorized access. As a temporary workaround, restrict access to these services within the application until a secure update is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾