Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8c3j-6rq2-9h32

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream.

Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream.

EPSS

Процентиль: 59%
0.00381
Низкий

Дефекты

CWE-284

Связанные уязвимости

nvd
больше 10 лет назад

Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream.

EPSS

Процентиль: 59%
0.00381
Низкий

Дефекты

CWE-284