Описание
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.
Ссылки
- Vendor Advisory
- US Government Resource
- Not Applicable
- Vendor Advisory
- Vendor Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.00101
Низкий
5.3 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-497
Связанные уязвимости
CVSS3: 5.3
github
4 месяца назад
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.
EPSS
Процентиль: 28%
0.00101
Низкий
5.3 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-497