Описание
Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:exemys:telemetry_web_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00265
Низкий
7.8 High
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
больше 3 лет назад
Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body.
EPSS
Процентиль: 50%
0.00265
Низкий
7.8 High
CVSS2
Дефекты
CWE-200