PT-2019-16580
CVE-2019-3428
·
تاريخ النشر
2019-11-22
·
تاريخ التحديث
2022-03-31
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
ZTE ZXCDN IAMWEB version V6.01.03.01
Description
The issue is related to a configuration error, allowing an attacker to directly access the management portal over HTTP. This could result in the leakage of users' information.
Recommendations
For version V6.01.03.01, consider configuring the management portal to use HTTPS instead of HTTP to encrypt the communication and prevent information leakage. Additionally, review and update the configuration to prevent direct access to the management portal.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾