PT-2019-13980 · Prise · Prise Adas

Publicado 2019-09-20 · Atualizado 2019-09-20 · CVE-2019-15089

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PRiSE adAS version 1.7.0

Description An issue was discovered where forms have no CSRF protection, allowing an attacker to execute actions as the administrator.

Recommendations For PRiSE adAS version 1.7.0, consider implementing CSRF protection to prevent attackers from executing actions as the administrator. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-15089

Produtos afetados

Prise Adas

Referências · 4

• http://adas-sso.com/es/extra/download.php · Nota
• https://osv.dev/vulnerability/CVE-2019-15089 · Aviso do Fabricante
• https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-15089 · Nota de Segurança