PT-2023-10248 · Unknown · Viakondratiuk Cash-Machine

Kondratiuk · Publicado 2023-01-19 · Atualizado 2024-05-17 · CVE-2015-10069

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions viakondratiuk cash-machine (affected versions not specified)

Description A critical issue has been found in the viakondratiuk cash-machine, affecting the is card pin at session/update failed attempts function of the machine.py file. This issue leads to SQL injection.

Recommendations To fix this issue, it is recommended to apply the patch with the name 62a6e24efdfa195b70d7df140d8287fdc38eb66d. As a temporary workaround, consider disabling the is card pin at session/update failed attempts function until the patch is applied.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2015-10069

Produtos afetados

Viakondratiuk Cash-Machine

Referências · 5

• https://vuldb.com/?ctiid.218896 · Nota
• https://t.me/cvenotify/42405 · Publicação no Telegram
• https://vuldb.com/?id.218896 · Nota
• https://github.com/viakondratiuk/cash-machine/commit/62a6e24efdfa195b70d7df140d8287fdc38eb66d · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2015-10069 · Nota de Segurança