Описание
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
EPSS
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
Связанные уязвимости
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.
Уязвимость программного обеспечения сервера SINEMA Remote Connect, связанная с недостаточной проверкой прав доступа, позволяющая нарушителю получить доступ к ресурсам системы по определенным URL-адресам в обход механизма авторизации
EPSS
8.8 High
CVSS3
9 Critical
CVSS2