PT-2019-9417
CVE-2018-17213
·
تاريخ النشر
2019-07-29
·
تاريخ التحديث
2019-08-05
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PrinterOn Central Print Services (CPS) versions through 4.1.4
Description
An issue allows a user without valid credentials to bypass the authentication process, obtaining a valid session cookie with guest/pseudo-guest level privileges. This cookie can then be used to perform other attacks.
Recommendations
For PrinterOn Central Print Services (CPS) versions through 4.1.4, update to a version later than 4.1.4 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the service to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾