PT-2014-07 · Solar-Log · Solar-Log

Publicado 2014-04-11 · Atualizado 2014-04-11

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Solar-log (affected versions not specified)

Description The issue is related to a lack of password protection for CGI scripts used for backup and restoration of data and system configuration in the Solar-log photoelectric system software. This allows a remote attacker to gain unauthorized access to confidential information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

BDU:2014-00402

Produtos afetados

Solar-Log

Referências · 5

• http://securitylab.ru/lab/PT-2014-07 · Nota
• http://securityfocus.com/bid/67455 · Nota
• http://osvdb.org/show/osvdb/106640 · Nota
• http://secunia.com/advisories/58396 · Nota
• https://bdu.fstec.ru/vul/2014-00402 · Nota de Segurança