PT-2023-13727
CVE-2022-39811
·
تاريخ النشر
2023-01-27
·
تاريخ التحديث
2025-03-28
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
Italtel NetMatch-S CI version 5.2.0-20211008
Description
The issue concerns incorrect Access Control. Specifically, it affects the "NMSCI-WebGui/advancedsettings.jsp" and "NMSCI-WebGui/SaveFileUploader" endpoints. This allows an attacker to view unauthorized pages and modify system configuration by bypassing controls without verifying user identity.
Recommendations
For Italtel NetMatch-S CI version 5.2.0-20211008, consider restricting access to the "NMSCI-WebGui/advancedsettings.jsp" and "NMSCI-WebGui/SaveFileUploader" endpoints until a proper fix is available. Additionally, ensure that all system configurations are monitored closely for unauthorized changes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾