PT-2023-2872 · D Link · D-Link D-View
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
D-Link D-View (affected versions not specified)
Description
This issue allows remote attackers to bypass authentication on affected installations. The specific flaw exists within the
TokenUtils class and results from a hard-coded cryptographic key. An attacker can leverage this vulnerability to bypass authentication on the system.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
D-Link D-View