Описание
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.5 (исключая)
cpe:2.3:a:2n:access_commander:*:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.00041
Низкий
7.2 High
CVSS3
Дефекты
CWE-1286
Связанные уязвимости
CVSS3: 7.2
github
22 дня назад
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.
EPSS
Процентиль: 12%
0.00041
Низкий
7.2 High
CVSS3
Дефекты
CWE-1286