PT-2021-9154
CVE-2020-10579
·
تاريخ النشر
2021-03-25
·
تاريخ التحديث
2021-03-26
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Invigo Automatic Device Management (ADM) versions through 5.0
Description
A directory traversal issue in the /admin/sysmon.php script allows remote attackers to list the content of arbitrary server directories accessible to the user running the application.
Recommendations
For Invigo Automatic Device Management (ADM) versions through 5.0, consider restricting access to the /admin/sysmon.php script until a patch is available. As a temporary workaround, limit the privileges of the user running the application to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾