PT-2024-29236 · Unknown+1 · Fast/Tools+1

Published 2024-06-26 · Updated 2024-06-26 · CVE-2024-4106

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions FAST/TOOLS versions R9.01 through R10.04 CI Server versions R1.01.00 through R1.03.00

Description A vulnerability has been found in the affected products, where built-in accounts have no passwords set by default. This allows an attacker to gain access to the product if it is operated without a password set.

Recommendations For FAST/TOOLS versions R9.01 through R10.04, set a password for the built-in accounts to prevent unauthorized access. For CI Server versions R1.01.00 through R1.03.00, set a password for the built-in accounts to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-258

Related Identifiers

CVE-2024-4106

Affected Products

Ci Server

Fast/Tools

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2024-4106 · Security Note
• https://web-material3.yokogawa.com/1/36059/files/YSAR-24-0001-E.pdf · Vendor Advisory