Описание
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.5 (исключая)
cpe:2.3:a:2n:access_commander:*:*:*:*:*:*:*:*
EPSS
Процентиль: 9%
0.00189
Низкий
7.2 High
CVSS3
Дефекты
CWE-1286
Связанные уязвимости
CVSS3: 7.2
github
5 месяцев назад
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.
EPSS
Процентиль: 9%
0.00189
Низкий
7.2 High
CVSS3
Дефекты
CWE-1286