PT-2019-9496 · Unknown · Evisitorpass

Publicado 2019-03-19 · Atualizado 2020-08-24 · CVE-2018-17497

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

I:H/AV:L/A:H/PR:N/UI:N/S:U/C:H/AC:L

Name of the Vulnerable Software and Affected Versions eVisitorPass (affected versions not specified)

Description The issue concerns default administrative credentials in the application, which could be exploited by an attacker to gain full access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-1188

Identificadores relacionados

CVE-2018-17497

Produtos afetados

Evisitorpass

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-17497 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/149657 · Nota
• https://osv.dev/vulnerability/CVE-2018-17497 · Aviso do Fabricante