PT-2023-10212 · Unknown · Jvvlee Merlinsboard

Jvvlee · Publicado 2023-01-09 · Atualizado 2024-05-17 · CVE-2015-10033

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Baixa

Vetor base

AV:A/AC:L/Au:M/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions jvvlee MerlinsBoard (affected versions not specified)

Description A vulnerability was found in the Grade Handler component of jvvlee MerlinsBoard, leading to improper authorization. The manipulation of an unknown part of this component is the cause of the issue. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Incorrect Authorization

Enumeração de Fraquezas

CWE-285

CWE-863

Identificadores relacionados

CVE-2015-10033

Produtos afetados

Jvvlee Merlinsboard

Referências · 6

• https://github.com/jvvlee/MerlinsBoard/commit/134f5481e2914b7f096cd92a22b1e6bcb8e6dfe5 · Correção
• https://t.me/cvenotify/41956 · Publicação no Telegram
• https://vuldb.com/?id.217713 · Nota
• https://vuldb.com/?ctiid.217713 · Nota
• https://t.me/cibsecurity/56179 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2015-10033 · Nota de Segurança