PT-2021-11630
CVE-2020-29023
·
تاريخ النشر
2021-02-16
·
تاريخ التحديث
2021-02-26
الوصف من
CVSS 2.0
4.9
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions:
Secomea GateManager versions prior to 9.3
Description:
The issue is related to improper encoding or escaping of output from the CSV Report Generator, allowing an authenticated administrator to generate a CSV file that can run arbitrary commands on a victim's computer when opened in a spreadsheet program, such as Excel.
Recommendations:
For Secomea GateManager versions prior to 9.3, update to version 9.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the CSV Report Generator until a patch is applied. Restrict access to the CSV Report Generator feature to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾