PT-2017-9627 · Kabona Ab · Webdatorcentral

Publicado 2017-02-13 · Atualizado 2017-03-01 · CVE-2016-8347

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kabona AB WebDatorCentral (WDC) versions prior to 3.4.0

Description An issue in the WDC application allows for a brute force attack method due to the lack of limitation on authentication attempts.

Recommendations For versions prior to 3.4.0, update to version 3.4.0 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2016-8347

Produtos afetados

Webdatorcentral

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-8347 · Nota de Segurança
• http://securityfocus.com/bid/93547 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07 · Nota