PT-2018-4300
CVE-2014-8422
·
تاريخ النشر
2018-04-12
·
تاريخ التحديث
2021-09-09
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Unify OpenStage SIP and OpenScape Desk Phone IP V3 versions prior to R3.32.0
Description
The issue concerns the web-based management interface in the affected devices, which generates session cookies with insufficient entropy. This makes it easier for remote attackers to hijack sessions via a brute-force attack.
Recommendations
For versions prior to R3.32.0, update to version R3.32.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the web-based management interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾