PT-2018-9480
CVE-2018-1000627
·
Publicado
2018-12-28
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Battelle V2I Hub version 2.5.1
Description
The issue is caused by the failure to restrict access to the API key file, allowing a remote attacker to obtain sensitive information. This could be exploited to gain unauthorized access to the system by obtaining the current API key.
Recommendations
For version 2.5.1, restrict access to the API key file to prevent unauthorized access.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾