PT-2021-17460
CVE-2021-27453
·
تاريخ النشر
2021-12-21
·
تاريخ التحديث
2022-01-04
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Mesa Labs AmegaView version 3.0
Description
The issue concerns the use of default cookies in the web application, which could be manipulated to bypass authentication. This may allow an attacker to gain unauthorized access to the application.
Recommendations
For Mesa Labs AmegaView version 3.0, consider changing the default cookies to unique, secure values to prevent authentication bypass. Additionally, review and strengthen the authentication mechanism to minimize the risk of unauthorized access.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾