PT-2018-9480 · Battelle · Battelle V2I Hub

Publicado 2018-12-28 · Atualizado 2019-10-03 · CVE-2018-1000627

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Battelle V2I Hub version 2.5.1

Description The issue is caused by the failure to restrict access to the API key file, allowing a remote attacker to obtain sensitive information. This could be exploited to gain unauthorized access to the system by obtaining the current API key.

Recommendations For version 2.5.1, restrict access to the API key file to prevent unauthorized access.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2018-1000627

Produtos afetados

Battelle V2I Hub

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-1000627 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/147304 · Nota
• https://osv.dev/vulnerability/CVE-2018-1000627 · Aviso do Fabricante