PT-2021-22790
CVE-2021-40066
·
تاريخ النشر
2021-09-16
·
تاريخ التحديث
2021-11-29
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Mobility versions prior to 11.76
Mobility versions prior to 12.14
Description
The access controls on the Mobility read-only API improperly validate user access permissions. Attackers with both network access to the API and valid credentials can read data from it, regardless of access control group membership settings.
Recommendations
For Mobility versions prior to 11.76, update to version 11.76 or later to resolve the issue.
For Mobility versions prior to 12.14, update to version 12.14 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾