Описание
The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.
EPSS
Процентиль: 39%
0.00468
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-497
Связанные уязвимости
CVSS3: 5.3
github
3 месяца назад
The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.
EPSS
Процентиль: 39%
0.00468
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-497