PT-2008-1820 · Ge Fanuc · Ge Fanuc Proficy Real-Time Information Portal

Eyal Udassin · Publicado 2008-01-29 · Atualizado 2024-02-14 · CVE-2008-0174

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GE Fanuc Proficy Real-Time Information Portal versions 2.6 and earlier

Description The issue allows remote attackers to steal passwords and gain privileges due to the use of HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext.

Recommendations For GE Fanuc Proficy Real-Time Information Portal versions 2.6 and earlier, consider disabling the use of HTTP Basic Authentication until a more secure authentication method is implemented. Restrict access to sensitive areas of the portal to minimize the risk of exploitation.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2008-0174

Produtos afetados

Ge Fanuc Proficy Real-Time Information Portal

Referências · 8

• http://kb.cert.org/vuls/id/180876 · Nota
• http://securitytracker.com/id?1019273 · Nota
• http://securityfocus.com/archive/1/487244/100/0/threaded · Nota
• http://support.gefanuc.com/support/index?page=kbchannel&id=KB12459 · Nota
• http://securityreason.com/securityalert/3590 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0174 · Nota de Segurança
• http://securityfocus.com/archive/1/487075/100/0/threaded · Nota
• http://securityfocus.com/bid/30754 · Nota