PT-2020-7674
CVE-2014-4198
·
تاريخ النشر
2020-02-13
·
تاريخ التحديث
2020-02-19
الوصف من
CVSS 2.0
6.4
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
BS-Client Private Client versions 2.4 through 2.5
Description
A Two-Factor Authentication Bypass issue exists, allowing a malicious user to access privileged functions via an XML request. This request neglects the use of
ADPswID and AD parameters.Recommendations
For versions 2.4 and 2.5, consider restricting access to privileged functions until a fix is available. As a temporary workaround, ensure that all XML requests properly utilize the
ADPswID and AD parameters to prevent bypassing two-factor authentication. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾