PT-2021-10874
CVE-2020-23282
·
تاريخ النشر
2021-07-21
·
تاريخ التحديث
2021-07-30
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
mConnect application version v02.001.00
Description
The issue allows an attacker to use a non-existing user with a generic password to connect to the application and gain access to unauthorized information through SQL injection in the Logon Page.
Recommendations
For version v02.001.00, consider restricting access to the Logon Page until a fix is available, and avoid using generic passwords to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾