PT-2017-15164 · Knowledge · Knowledge

Publicado 2017-04-28 · Atualizado 2020-04-24 · CVE-2017-2097

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Knowledge versions prior to v1.7.0

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Recommendations For versions prior to v1.7.0, update to version v1.7.0 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-2097

Produtos afetados

Knowledge

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-2097 · Nota de Segurança
• http://securityfocus.com/bid/95779 · Nota
• https://osv.dev/vulnerability/CVE-2017-2097 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN09460804/index.html · Nota