Описание
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2015-7929
- https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03
- http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01
- http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html
- http://seclists.org/fulldisclosure/2015/Dec/118
- http://www.securityfocus.com/bid/79625
Связанные уязвимости
CVSS3: 4.3
nvd
около 10 лет назад
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.