PT-2020-12769
CVE-2020-11681
·
تاريخ النشر
2020-06-04
·
تاريخ التحديث
2020-06-10
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Castel NextGen DVR version 1.0.0
Description
The issue allows low-privileged users to exploit the fact that credentials for the associated SMTP server are stored and displayed in cleartext. This can be used to create an administrator user and obtain the SMTP credentials.
Recommendations
For Castel NextGen DVR version 1.0.0, consider restricting access to the SMTP server configuration to prevent low-privileged users from exploiting the cleartext credentials. As a temporary workaround, limit the creation of new administrator users until a fix is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾