PT-2019-13859 · Prise+1 · Prise Adas+1

Publicado 2019-09-20 · Atualizado 2019-09-23 · CVE-2019-14911

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0

Description An issue was discovered where the OPENSSO module does not properly escape output on error, leading to reflected XSS.

Recommendations For PRiSE adAS version 1.7.0, consider disabling the OPENSSO module until a patch is available to prevent reflected XSS attacks.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-14911

Produtos afetados

Opensso

Prise Adas

Referências · 4

• http://adas-sso.com/es/extra/download.php · Nota
• https://osv.dev/vulnerability/CVE-2019-14911 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14911 · Nota de Segurança
• https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas · Correção