PT-2021-3454
CVE-2020-20472
·
تاريخ النشر
2021-06-21
·
تاريخ التحديث
2021-06-23
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
White Shark System (WSS) version 1.3.2
Description
The issue is related to a sensitive information disclosure. The
if get addbook.php file lacks an authentication operation, allowing remote attackers to obtain username information for all users of the current site. This can lead to unauthorized access to protected information.Recommendations
For White Shark System (WSS) version 1.3.2, consider implementing authentication for the
if get addbook.php file to prevent unauthorized access. As a temporary workaround, restrict access to the if get addbook.php file until a proper authentication mechanism is in place. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾