PT-2018-17952
CVE-2018-7211
·
Published
2018-02-18
·
Updated
2020-08-24
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
iDashboards version 9.6b
Description
An issue was discovered in the SSO implementation, which is affected by a weak obfuscation library. This allows man-in-the-middle attackers to discover credentials.
Recommendations
For iDashboards version 9.6b, consider disabling the SSO implementation until a patch is available to prevent man-in-the-middle attacks.
Found an issue in the description? Have something to add? Feel free to write us 👾