PT-2019-11148
CVE-2018-8827
·
تاريخ النشر
2019-01-03
·
تاريخ التحديث
2019-01-15
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Technicolor MediaAccess TG789vac v2 HP version v16.3.7190-2761005-20161004084353
Description:
The issue concerns the admin web interface, where unsanitized user input is displayed, allowing an unauthenticated malicious user to embed JavaScript into the Log viewer interface. This is achieved via a crafted HTTP Referer header.
Recommendations:
For version v16.3.7190-2761005-20161004084353, as a temporary workaround, consider restricting access to the Log viewer interface until a patch is available. Avoid using the Log viewer interface with untrusted input until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾