PT-2019-18135 · Bd · Bd Facslyric Research Use Only

Publicado 2019-02-06 · Atualizado 2020-10-19 · CVE-2019-6517

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BD FACSLyric Research Use Only versions between November 2017 and November 2018 BD FACSLyric IVD is not affected as it properly enforces user access control.

Description The issue concerns improper enforcement of user access control to privileged accounts. This may allow unauthorized access to administrative level functions.

Recommendations For BD FACSLyric Research Use Only between November 2017 and November 2018, consider restricting access to administrative level functions until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2019-6517

Produtos afetados

Bd Facslyric Research Use Only

Referências · 3

• http://securityfocus.com/bid/106766 · Nota
• https://ics-cert.us-cert.gov/advisories/ICSMA-19-029-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-6517 · Nota de Segurança