Описание
Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For Transportation before 23.00.01.25.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 23.00.01.25 (исключая)Версия до 23.00.02.03 (исключая)
Одно из
cpe:2.3:a:bentley:assetwise_alim_for_transportation:*:*:*:*:*:*:*:*
cpe:2.3:a:bentley:eb_system_management_console:*:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00299
Низкий
8.6 High
CVSS3
Дефекты
CWE-287
Связанные уязвимости
CVSS3: 8.6
github
около 2 лет назад
Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For Transportation before 23.00.01.25.
EPSS
Процентиль: 53%
0.00299
Низкий
8.6 High
CVSS3
Дефекты
CWE-287