PT-2019-8887
CVE-2018-12300
·
تاريخ النشر
2019-05-13
·
تاريخ التحديث
2019-05-13
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Seagate NAS OS version 4.3.15.1
Description
The issue allows attackers to disclose information in the Referer header via the 'state' URL parameter in echo-server.html. This is due to an arbitrary redirect in the affected software.
Recommendations
For Seagate NAS OS version 4.3.15.1, avoid using the
state URL parameter in the affected echo-server.html until the issue is resolved. As a temporary workaround, consider restricting access to the echo-server.html page to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾