PT-2019-7247 · Unity · Unity Web Player

Publicado 2019-07-29 · Atualizado 2019-08-01 · CVE-2015-9288

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Unity Web Player versions 4.6.6f1 and earlier, 5.x before 5.0.3f2

Description The issue allows attackers to read messages or access online services via a victim's credentials.

Recommendations For Unity Web Player versions 4.6.6f1 and earlier, update to version 4.6.6f2 or later. For Unity Web Player 5.x before 5.0.3f2, update to version 5.0.3f2 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-9288

Produtos afetados

Unity Web Player

Referências · 3

• https://blogs.unity3d.com/2015/06/06/security-update-coming-for-web-player · Aviso do Fabricante
• https://t.me/cibsecurity/5776 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2015-9288 · Nota de Segurança