PT-2019-9675
CVE-2018-18941
·
تاريخ النشر
2019-01-31
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Vignette Content Management version 6
Description
The issue allows for remote access to administrator privileges by discovering the admin password in the "vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin" HTML source code, and then creating a privileged user account. It is noted that this product is discontinued.
Recommendations
For Vignette Content Management version 6, as a temporary workaround, consider restricting access to the "vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin" HTML page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾