PT-2018-13220 · Posim · Posim Evo

Publicado 2018-08-23 · Atualizado 2018-10-26 · CVE-2018-15808

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions POSIM EVO version 15.13 for Windows

Description The issue concerns hardcoded database credentials for the root database user in POSIM EVO. This could lead to a breach of confidentiality, integrity, or availability, and may allow attackers to remotely execute code on associated POSIM EVO clients.

Recommendations For POSIM EVO version 15.13 for Windows, consider changing the hardcoded database credentials for the root user to unique, secure credentials to prevent unauthorized access. As a temporary workaround, restrict access to the database to minimize the risk of exploitation.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-15808

Produtos afetados

Posim Evo

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-15808 · Nota de Segurança
• https://versprite.com/advisories/posim-evo-for-windows-2 · Nota
• https://osv.dev/vulnerability/CVE-2018-15808 · Aviso do Fabricante