PT-2024-8110

CVE-2024-41905

·

تاريخ النشر

2024-08-13

·

تاريخ التحديث

2024-08-14

الوصف من

CVSS 3.1
6.8
متوسطة
المقاييسAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions: SINEC Traffic Analyzer versions prior to V2.0
Description: A vulnerability has been identified in the SINEC Traffic Analyzer application, which lacks access control for accessing files. This could allow an authenticated attacker with low privileges to gain access to sensitive information. The vulnerability is related to insufficient access control, which may enable a remote attacker to obtain unauthorized access to protected information.
Recommendations: For versions prior to V2.0, update to version V2.0 or later to resolve the issue. As a temporary workaround, consider implementing additional access control measures to restrict access to sensitive files and information. Restrict access to the application to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾