PT-2019-9461 · Unknown · Live Call Support Application

Publicado 2019-06-19 · Atualizado 2019-06-20 · CVE-2018-17389

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Live Call Support Application version 1.5

Description The issue exists in the server.php file, allowing for the addition of an admin account due to CSRF.

Recommendations For version 1.5, update the server.php file to include proper CSRF protection mechanisms, such as token validation, to prevent unauthorized admin account additions.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2018-17389

Produtos afetados

Live Call Support Application

Referências · 4

• 🔥 https://exploit-db.com/exploits/46140 · Exploit
• https://exploit-db.com/author/?a=8844 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-17389 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-17389 · Aviso do Fabricante