PT-2018-13060
CVE-2018-15502
·
تاريخ النشر
2018-09-12
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Lone Wolf Technologies loadingDOCS version 2018-08-13
Description
The issue allows remote attackers to download confidential files via https requests for predictable URLs due to insecure permissions.
Recommendations
For version 2018-08-13, update the permissions to restrict access to confidential files and ensure that URLs are not predictable to prevent unauthorized downloads.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾