Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Indrajith.A.N

#28820de 53,635
8.8CVSS total
Vulnerabilidades · 1
PT-2017-17401
8.8
2017-03-14
Digisol · Digisol Dg-Hr1400 · CVE-2017-6896
**Name of the Vulnerable Software and Affected Versions** DIGISOL DG-HR1400 version 1.00.02 **Description** A privilege escalation issue allows an attacker to gain admin privileges by modifying the Base64-encoded session cookie value, thus escalating from user privilege to admin privilege. **Recommendations** For DIGISOL DG-HR1400 version 1.00.02, as a temporary workaround, consider restricting access to the session cookie until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.