PT-2022-10545
CVE-2021-36761
·
تاريخ النشر
2022-06-21
·
تاريخ التحديث
2022-06-28
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Qlik Sense April 2020 patch 4
Description
The GeoAnalytics feature in Qlik Sense allows Server-Side Request Forgery (SSRF). This issue enables an attacker to forge requests from the server, potentially leading to unauthorized access to internal systems or data.
Recommendations
For Qlik Sense April 2020 patch 4, consider disabling the GeoAnalytics feature as a temporary workaround until a patch is available. Restrict access to the GeoAnalytics module to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾