PT-2020-11152
CVE-2019-5647
·
تاريخ النشر
2020-01-22
·
تاريخ التحديث
2020-01-30
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Rapid7 AppSpider versions 3.8.213 and prior
Description
The Chrome Plugin for Rapid7 AppSpider can incorrectly keep browser sessions active after recording a macro, even after a restart of the Chrome browser. This behavior could make future session hijacking attempts easier, since the user could believe a session was closed when it was not.
Recommendations
For versions 3.8.213 and prior, update to version 3.8.215 to resolve the issue. As a temporary workaround, consider manually closing all browser sessions after recording a macro to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾