PT-2021-22124
CVE-2021-38431
·
تاريخ النشر
2021-10-15
·
تاريخ التحديث
2021-10-20
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Advantech WebAccess SCADA versions 9.0.3 and prior
Description
The issue allows an authenticated user to disclose project names and paths from other users using API functions.
Recommendations
For Advantech WebAccess SCADA versions 9.0.3 and prior, consider restricting access to API functions until a patch is available.
As a temporary workaround, limit the use of API functions that can disclose project names and paths to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾