PT-2020-5394
CVE-2020-9314
·
تاريخ النشر
2020-05-10
·
تاريخ التحديث
2021-07-21
الوصف من
CVSS 2.0
4.9
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Oracle iPlanet Web Server versions 7.0.x
Description
The issue exists due to an incomplete fix, allowing an attacker to inject images into the administration console. This can be achieved through the
productNameSrc parameter in the admingui URI. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.Recommendations
For Oracle iPlanet Web Server versions 7.0.x, consider restricting access to the
admingui URI to minimize the risk of exploitation. Avoid using the productNameSrc parameter in the affected URI until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾