PT-2017-19084 · Envitech · Envitech Envidas Ultimate

Publicado 2017-10-17 · Atualizado 2019-10-09 · CVE-2017-9625

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Envitech EnviDAS Ultimate versions prior to 1.0.0.5

Description An issue with improper authentication was found, allowing potential attackers to view information, modify settings, or execute code remotely due to the lack of proper authentication in the web application.

Recommendations For versions prior to 1.0.0.5, update to version 1.0.0.5 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-9625

Produtos afetados

Envitech Envidas Ultimate

Referências · 4

• http://securityfocus.com/bid/101249 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-17-285-03 · Nota
• https://osv.dev/vulnerability/CVE-2017-9625 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9625 · Nota de Segurança