PT-2019-2310 · Unknown · Управление Региональной Программой Капитального Ремонта

Publicado

2019-04-23

·

Atualizado

2019-04-23

CVSS v2.0

2.6

Baixa

VetorAV:N/AC:H/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Управление региональной программой капитального ремонта (affected versions not specified)
Description The issue is related to weaknesses in the authorization mechanism of the platform. It can be exploited by a remote attacker using specially crafted POST requests to guess user account names.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

BDU:2019-02081

Produtos afetados

Управление Региональной Программой Капитального Ремонта