CVE-2012-2963

Опубликовано: 12 авг. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The administrative interface in the embedded web server on the BreakingPoint Storm appliance before 3.0 does not require authentication for the gwt/BugReport script, which allows remote attackers to obtain sensitive information by downloading a .tgz file.

Ссылки

http://www.kb.cert.org/vuls/id/520430
US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8GANCC
http://www.secureworks.com/research/advisories/SWRX-2012-005/
http://www.kb.cert.org/vuls/id/520430
US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8GANCC
http://www.secureworks.com/research/advisories/SWRX-2012-005/

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:breakingpointsystems:breakingpoint_storm_appliance_ctm:*:*:*:*:*:*:*:*

Версия до 2.0 (включая)

cpe:2.3:o:breakingpointsystems:breakingpoint_storm_appliance_ctm:1.2:*:*:*:*:*:*:*

cpe:2.3:o:breakingpointsystems:breakingpoint_storm_appliance_ctm:1.4:*:*:*:*:*:*:*

cpe:2.3:o:breakingpointsystems:breakingpoint_storm_appliance_ctm:1.5:*:*:*:*:*:*:*

cpe:2.3:h:breakingpointsystems:breakingpoint_storm_appliance:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01314

Низкий

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-66vh-4g4j-7x2q

github

больше 3 лет назад