PT-2018-18252
CVE-2018-7745
·
Publicado
2018-03-07
·
Atualizado
2021-09-09
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Western Bridge Cobub Razor version 0.7.2
Description:
An issue was discovered where authentication is not required for the "/index.php?/install/installation/createuserinfo" API endpoint, resulting in the ability to create accounts without proper authorization.
Recommendations:
For Western Bridge Cobub Razor version 0.7.2, consider restricting access to the "/index.php?/install/installation/createuserinfo" endpoint until a fix is available, and ensure that proper authentication mechanisms are implemented to prevent unauthorized account creation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾