Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-57q4-f9gg-9w94

Опубликовано: 14 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an attacker viewing and modifying the application settings without authenticating by accessing a specific uniform resource locator (URL) on the webserver.

Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an attacker viewing and modifying the application settings without authenticating by accessing a specific uniform resource locator (URL) on the webserver.

EPSS

Процентиль: 44%
0.00215
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.8
nvd
около 3 лет назад

Due to the lack of adequately implemented access-control rules, all versions Kingspan TMS300 CS are vulnerable to an attacker viewing and modifying the application settings without authenticating by accessing a specific uniform resource locator (URL) on the webserver.

EPSS

Процентиль: 44%
0.00215
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-287