PT-2019-4021 · Unknown · Безопасный Город
Publicado
2019-08-26
·
Atualizado
2019-08-26
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
«Безопасный город» (affected versions not specified)
Description
The issue is related to weaknesses in the authorization mechanisms of the electronic interaction module for services and officials of the «Безопасный город» hardware-software platform. An attacker can exploit this issue remotely to determine all existing usernames by using a brute-force method in the
username field with specially crafted POST requests.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Безопасный Город