PT-2019-12556 · Bosch+1 · Bosch Access Professional Edition+1

Oleksii Orekhov · Publicado 2019-09-12 · Atualizado 2020-10-08 · CVE-2019-11899

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bosch Access Professional Edition (APE) version 3.8

Description An unauthenticated attacker can gain unauthorized access to sensitive data by exploiting the Windows SMB protocol on a client installation. Client installations require authorization by the APE administrator.

Recommendations For Bosch Access Professional Edition (APE) version 3.8, ensure that all client installations are properly authorized by the APE administrator to prevent unauthorized access.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2019-11899

Produtos afetados

Bosch Access Professional Edition

Windows Smb

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-11899 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11899 · Nota de Segurança
• https://psirt.bosch.com/Advisory/BOSCH-SA-844044.html · Aviso do Fabricante