PT-2018-9480
CVE-2018-1000627
·
Published
2018-12-28
·
Updated
2019-10-03
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Battelle V2I Hub version 2.5.1
Description
The issue is caused by the failure to restrict access to the API key file, allowing a remote attacker to obtain sensitive information. This could be exploited to gain unauthorized access to the system by obtaining the current API key.
Recommendations
For version 2.5.1, restrict access to the API key file to prevent unauthorized access.
Found an issue in the description? Have something to add? Feel free to write us 👾