PT-2019-13475
CVE-2019-13919
·
Publicado
2019-09-13
·
Atualizado
2021-11-02
Descrição por
CVSS 3.1
4.3
MédiaMétricasAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
SINEMA Remote Connect Server versions prior to V2.0 SP1
Description
A security issue has been identified where certain pages, intended for privileged users, can be accessed by non-privileged users. This can be exploited by an attacker with network access and valid web interface credentials, without requiring user interaction. The issue allows unauthorized access to sensitive information, excluding passwords. At the time of reporting, there were no known public exploits.
Recommendations
For versions prior to V2.0 SP1, update to V2.0 SP1 or later to resolve the issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾