PT-2021-22987
CVE-2021-40858
·
تاريخ النشر
2021-12-06
·
تاريخ التحديث
2022-01-04
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:N/AC:L/Au:S/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Auerswald COMpact 5500R versions prior to 8.2B
Description
The issue allows a sub-admin to read the cleartext Admin password via the
fileName parameter with a substring such as ../../etc/passwd. This enables Arbitrary File Disclosure.Recommendations
For versions prior to 8.2B, update to version 8.2B or later to resolve the issue. As a temporary workaround, consider restricting access to the
fileName parameter to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾