Описание
Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.
Ссылки
- Third Party Advisory
- Release NotesVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 19 (включая) до 30 (исключая)
cpe:2.3:a:atlassian:agiloft:*:*:*:*:*:*:*:*
EPSS
Процентиль: 5%
0.00022
Низкий
8.1 High
CVSS3
Дефекты
CWE-494
Связанные уязвимости
CVSS3: 8.1
github
5 месяцев назад
Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.
EPSS
Процентиль: 5%
0.00022
Низкий
8.1 High
CVSS3
Дефекты
CWE-494