PT-2023-12117 · Unknown · Open-Falcon Dashboard

Testivy · Publicado 2023-08-11 · Atualizado 2023-08-16 · CVE-2021-27523

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions open-falcon dashboard version 0.2.0

Description An issue was discovered in the open-falcon dashboard, allowing remote attackers to gain, modify, and delete sensitive information via a crafted POST request to the register interface.

Recommendations For open-falcon dashboard version 0.2.0, consider disabling the register interface until a patch is available to prevent exploitation. Restrict access to the register interface to minimize the risk of sensitive information being compromised. Avoid using the register interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2021-27523

Produtos afetados

Open-Falcon Dashboard

Referências · 6

• 🔥 https://github.com/open-falcon/dashboard/issues/153 · Exploit
• https://osv.dev/vulnerability/CVE-2021-27523 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1690264367458062336 · Publicação no Twitter
• https://t.me/cvenotify/56659 · Publicação no Telegram
• https://t.me/cibsecurity/68345 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2021-27523 · Nota de Segurança