PT-2020-20658
CVE-2020-9437
·
تاريخ النشر
2020-06-25
·
تاريخ التحديث
2020-07-06
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SecureAuth IdP version 9.3.0
Description
The issue is related to a client-side template injection in SecureAuth.aspx, which allows for script execution similar to XSS. This enables potential attackers to execute scripts on the client-side.
Recommendations
For SecureAuth IdP version 9.3.0, consider disabling the affected SecureAuth.aspx page until a patch is available to prevent script execution. Restrict access to this page to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾