Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qp82-v7w8-wfwq

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.

EPSS

Процентиль: 47%
0.00241
Низкий

8.8 High

CVSS3

Дефекты

CWE-280

Связанные уязвимости

CVSS3: 8.8
nvd
почти 7 лет назад

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.

CVSS3: 8.8
fstec
почти 7 лет назад

Уязвимость программного обеспечения сервера SINEMA Remote Connect, связанная с недостаточной проверкой прав доступа, позволяющая нарушителю получить доступ к ресурсам системы по определенным URL-адресам в обход механизма авторизации

EPSS

Процентиль: 47%
0.00241
Низкий

8.8 High

CVSS3

Дефекты

CWE-280