PT-2017-11768

CVE-2017-11134

·

Published

2017-08-01

·

Updated

2019-10-03

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions heinekingmedia StashCat versions 1.7.5 and earlier
Description An issue allows login credentials to be written into a log file on the device. As a result, an attacker with access to the logs can read these credentials.
Recommendations For heinekingmedia StashCat versions 1.7.5 and earlier, consider restricting access to device logs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾