Описание
Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.3.2 (включая)Версия до 3.4.0.0.3.12_20210525 (включая)
Одно из
cpe:2.3:a:secom:door_access_control:*:*:*:*:*:*:*:*
cpe:2.3:a:secom:personnel_attendance_system:*:*:*:*:*:*:*:*
EPSS
Процентиль: 66%
0.00509
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-22
Связанные уязвимости
github
больше 3 лет назад
Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission.
EPSS
Процентиль: 66%
0.00509
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-22