PT-2019-4020 · Безопасный Город · Безопасный Город
Publicado
2019-08-26
·
Atualizado
2019-08-26
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Безопасный город (affected versions not specified)
Description
The issue is related to insufficient access control mechanisms in the electronic interaction module of the "Безопасный город" hardware and software platform. Exploitation of this issue could allow a remote attacker to gain access to any account by resetting the password using a specially crafted POST request, employing a brute-force method to guess passwords.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Безопасный Город