PT-2015-7329 · Basware · Basware Banking

Samuel Lavitt · Publicado 2015-08-31 · Atualizado 2015-08-31 · CVE-2015-6743

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Basware Banking (Maksuliikenne) version 8.90.07.X

Description The issue allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of a hardcoded password for an unspecified account.

Recommendations For Basware Banking (Maksuliikenne) version 8.90.07.X, consider changing the hardcoded password to a unique and secure password to prevent unauthorized access. As a temporary workaround, restrict access to the account that uses the hardcoded password until a more permanent solution is implemented.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2015-6743

Produtos afetados

Basware Banking

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6743 · Nota de Segurança
• https://viestintavirasto.fi/en/cybersecurity/vulnerabilities/2015/haavoittuvuus-2015-018.html · Nota
• http://seclists.org/fulldisclosure/2015/Jul/120 · Nota