PT-2020-4910
CVE-2020-3531
·
تاريخ النشر
2020-11-18
·
تاريخ التحديث
2020-12-02
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Cisco IoT Field Network Director (affected versions not specified)
Description:
A vulnerability in the REST API of Cisco IoT Field Network Director could allow an unauthenticated, remote attacker to access the back-end database of an affected system. The issue exists due to the software not properly authenticating REST API calls. An attacker could exploit this by obtaining a cross-site request forgery (CSRF) token and using it with REST API requests, potentially allowing access to the back-end database to read, alter, or drop information.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾