PT-2018-9480
CVE-2018-1000627
·
تاريخ النشر
2018-12-28
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Battelle V2I Hub version 2.5.1
Description
The issue is caused by the failure to restrict access to the API key file, allowing a remote attacker to obtain sensitive information. This could be exploited to gain unauthorized access to the system by obtaining the current API key.
Recommendations
For version 2.5.1, restrict access to the API key file to prevent unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾