Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p89j-q5xr-4pww

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.

EPSS

Процентиль: 68%
0.00565
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
CWE-918

Связанные уязвимости

CVSS3: 7.5
nvd
больше 6 лет назад

A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on an affected system. The vulnerability exists because the affected system does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to access the system and perform unauthorized actions.

CVSS3: 5.3
fstec
больше 6 лет назад

Уязвимость программного средства автоматизации работы операторов Cisco Finesse, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю получить доступ к системе и выполнить несанкционированные действия

EPSS

Процентиль: 68%
0.00565
Низкий

7.5 High

CVSS3

Дефекты

CWE-20
CWE-918