PT-2017-6708 · Microsec · Microsec E-Szigno

Publicado

2017-07-21

·

Atualizado

2017-07-26

·

CVE-2015-3931

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Microsec e-Szigno versions prior to 3.2.7.12
Description The issue allows remote attackers to perform XML signature wrapping attacks. This can be achieved via an e-akta signed document with a ds:Object node that contains a crafted payload prepended to a valid ds:Object.
Recommendations For versions prior to 3.2.7.12, update to version 3.2.7.12 or later to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-91

Identificadores relacionados

CVE-2015-3931

Produtos afetados

Microsec E-Szigno