PT-2022-7982
CVE-2017-20109
·
تاريخ النشر
2022-06-29
·
تاريخ التحديث
2022-07-07
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Teleopti WFM versions up to 7.1.0
Description
A problematic issue was found in the Administration component of Teleopti WFM, specifically affecting an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant. This issue leads to information disclosure of credentials and can be exploited remotely. The exploit has been publicly disclosed.
Recommendations
For versions up to 7.1.0, apply a patch to fix this issue. As a temporary workaround, consider restricting access to the /TeleoptiWFM/Administration/GetOneTenant file to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾