PT-2022-12040
CVE-2021-44312
·
تاريخ النشر
2022-03-30
·
تاريخ التحديث
2022-04-08
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Firmware Analysis and Comparison Tool version 3.2
Description
An issue allows logged in administrators to be targeted by a CSRF attack through visiting a crafted web page.
Recommendations
For Firmware Analysis and Comparison Tool version 3.2, consider implementing CSRF protection measures, such as token-based validation, to prevent exploitation. As a temporary workaround, restrict access to the web interface for logged-in administrators until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾