Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7hfh-vfcv-wfqp

Опубликовано: 04 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.5

Описание

There is a difficult to exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 10.8.1 through 11.2 on Windows and Linux, and ArcGIS Enterprise 11.1 and below on Kubernetes which, under unique circumstances, could potentially allow a remote, unauthenticated attacker to compromise the confidentiality, integrity, and availability of the software.

There is a difficult to exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 10.8.1 through 11.2 on Windows and Linux, and ArcGIS Enterprise 11.1 and below on Kubernetes which, under unique circumstances, could potentially allow a remote, unauthenticated attacker to compromise the confidentiality, integrity, and availability of the software.

EPSS

Процентиль: 83%
0.01891
Низкий

8.5 High

CVSS3

Дефекты

CWE-287
CWE-323

Связанные уязвимости

CVSS3: 8.5
nvd
почти 2 года назад

There is a difficult to exploit improper authentication issue in the Home application for Esri Portal for ArcGIS versions 11.2 and below on Windows and Linux, and ArcGIS Enterprise 11.1 and below on Kubernetes which, under unique circumstances, could potentially allow a remote, unauthenticated attacker to compromise the confidentiality, integrity, and availability of the software.

EPSS

Процентиль: 83%
0.01891
Низкий

8.5 High

CVSS3

Дефекты

CWE-287
CWE-323