PT-2020-14849
CVE-2020-16258
·
تاريخ النشر
2020-10-28
·
تاريخ التحديث
2020-11-04
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Winston version 1.5.4
Description
The issue concerns the use of a Monit service in Winston devices, which is configured with default credentials and not managed during the normal user process.
Recommendations
For Winston version 1.5.4, consider changing the default credentials of the Monit service to prevent unauthorized access. As a temporary workaround, restrict access to the Monit service until a more permanent solution is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾