PT-2018-13180 · Breustedt · Mensamax

Stefan Pietsch · Publicado 2018-10-02 · Atualizado 2019-10-03 · CVE-2018-15752

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MensaMax (aka com.breustedt.mensamax) version 4.3

Description The issue allows man-in-the-middle attackers to eavesdrop on authentication information between the application and the server due to cleartext transmission of sensitive information.

Recommendations For MensaMax version 4.3, consider implementing encryption for sensitive information transmission to prevent eavesdropping. As a temporary workaround, restrict the use of the application on unsecured networks to minimize the risk of exploitation.

Exploit

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2018-15752

Produtos afetados

Mensamax

Referências · 4

• 🔥 https://advisories.e2security.de/2018/E2SA-2018-01.txt · Exploit
• 🔥 https://seclists.org/bugtraq/2018/Oct/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15752 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-15752 · Aviso do Fabricante