PT-2020-5223
CVE-2020-3485
·
تاريخ النشر
2020-08-19
·
تاريخ التحديث
2020-09-09
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Cisco Vision Dynamic Signage Director (affected versions not specified)
Description
The issue is related to errors in access control management in the role-based access control (RBAC) functionality of the system. This could allow a remote attacker to gain access to resources they should not be able to access and perform actions they should not be able to perform. The vulnerability exists due to improper handling of RBAC by the web management software. An attacker could exploit this by sending a crafted HTTP request to an affected device, potentially allowing them to view and delete certain screen content on the system that they would not normally have privileges to access.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾