PT-2009-4217 · Armorlogic · Armorlogic Profense Web Application Firewall
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Armorlogic Profense Web Application Firewall versions 2.2.x through 2.2.21
Armorlogic Profense Web Application Firewall versions 2.4.x through 2.4.3
Description:
The issue allows remote attackers to obtain access more easily due to a default root password hash and permitted password-based root logins over SSH.
Recommendations:
For Armorlogic Profense Web Application Firewall versions 2.2.x through 2.2.21, update to version 2.2.22 or later.
For Armorlogic Profense Web Application Firewall versions 2.4.x through 2.4.3, update to version 2.4.4 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Armorlogic Profense Web Application Firewall