PT-2022-14909
CVE-2022-21184
·
تاريخ النشر
2022-06-17
·
تاريخ التحديث
2022-06-30
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Bachmann Visutec GmbH Atvise versions 3.5.4 through 3.7
Description
An information disclosure issue exists in the License registration functionality. A plaintext HTTP request can lead to a disclosure of login credentials. An attacker can perform a man-in-the-middle attack to trigger this issue.
Recommendations
For versions 3.5.4 through 3.7, consider disabling the License registration functionality until a patch is available to prevent exploitation. Restrict access to sensitive areas of the application to minimize the risk of login credential disclosure.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾