PT-2020-10252

CVE-2019-19837

·

Published

2020-01-23

·

Updated

2021-07-21

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Ruckus Wireless Unleashed versions through 200.7.10.102.64
Description The issue is related to incorrect access control in the web interface, allowing remote information disclosure of bin/web.conf via HTTP requests.
Recommendations For versions through 200.7.10.102.64, consider restricting access to the web interface until a fix is available. As a temporary workaround, limit HTTP requests to the vulnerable web interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾