Описание
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role.
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:digitalguardian:management_console:7.1.2.0015:*:*:*:*:*:*:*
EPSS
Процентиль: 40%
0.00178
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-918
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role.
EPSS
Процентиль: 40%
0.00178
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-918