PT-2019-16580 · Zte · Zxcdn Iamweb

Publicado 2019-11-22 · Atualizado 2022-03-31 · CVE-2019-3428

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXCDN IAMWEB version V6.01.03.01

Description The issue is related to a configuration error, allowing an attacker to directly access the management portal over HTTP. This could result in the leakage of users' information.

Recommendations For version V6.01.03.01, consider configuring the management portal to use HTTPS instead of HTTP to encrypt the communication and prevent information leakage. Additionally, review and update the configuration to prevent direct access to the management portal.

Correção

Identificadores relacionados

CVE-2019-3428

Produtos afetados

Zxcdn Iamweb

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-3428 · Nota de Segurança
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1011863 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-3428 · Aviso do Fabricante