Описание
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain sensitive information by sniffing the network.
Ссылки
- US Government Resource
- US Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 7.0.1 (включая)
Одно из
cpe:2.3:a:paperthin:commonspot_content_server:*:*:*:*:*:*:*:*
cpe:2.3:a:paperthin:commonspot_content_server:8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:paperthin:commonspot_content_server:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:paperthin:commonspot_content_server:8.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00338
Низкий
5 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
больше 3 лет назад
PaperThin CommonSpot before 7.0.2 and 8.x before 8.0.3 relies on an HTTP session for entering credentials on login pages, which allows remote attackers to obtain sensitive information by sniffing the network.
EPSS
Процентиль: 56%
0.00338
Низкий
5 Medium
CVSS2
Дефекты
CWE-200