PT-2019-13976 · Prise · Prise Adas

Publicado 2019-09-20 · Atualizado 2020-08-24 · CVE-2019-15085

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0

Description An issue was discovered where the current database password is embedded in the change password form, potentially exposing it.

Recommendations For PRiSE adAS version 1.7.0, consider removing the embedded database password from the change password form to prevent potential exposure. As a temporary workaround, restrict access to the change password form until a more secure solution is implemented.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2019-15085

Produtos afetados

Prise Adas

Referências · 4

• http://adas-sso.com/es/extra/download.php · Nota
• https://osv.dev/vulnerability/CVE-2019-15085 · Aviso do Fabricante
• https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-15085 · Nota de Segurança