PT-2020-10252

CVE-2019-19837

·

تاريخ النشر

2020-01-23

·

تاريخ التحديث

2021-07-21

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions through 200.7.10.102.64
Description The issue is related to incorrect access control in the web interface, allowing remote information disclosure of bin/web.conf via HTTP requests.
Recommendations For versions through 200.7.10.102.64, consider restricting access to the web interface until a fix is available. As a temporary workaround, limit HTTP requests to the vulnerable web interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾