Описание
Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.
Ссылки
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
- Third Party AdvisoryUS Government Resource
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.90 (включая)
Одновременно
cpe:2.3:o:johnsoncontrols:c-cure_9000_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:johnsoncontrols:c-cure_9000:-:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00122
Низкий
4.3 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-204
CWE-203
Связанные уязвимости
CVSS3: 5.3
github
больше 2 лет назад
Under certain circumstances a C•CURE Portal user could enumerate user accounts in C•CURE 9000 version 2.90 and prior versions. This issue affects: C•CURE 9000 2.90 and earlier version 2.90 and prior versions.
EPSS
Процентиль: 32%
0.00122
Низкий
4.3 Medium
CVSS3
5.3 Medium
CVSS3
Дефекты
CWE-204
CWE-203