PT-2019-13979
CVE-2019-15088
·
تاريخ النشر
2019-09-20
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PRiSE adAS version 1.7.0
Description
An issue was discovered where password hashes are compared using the equality operator, allowing potential bypass of login authentication under specific circumstances.
Recommendations
For PRiSE adAS version 1.7.0, consider updating the authentication mechanism to use a secure comparison method to prevent potential bypass of login authentication. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾