8.7
High
CVE-2024-6515 Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher…
Description
Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher probability of unintended credentails exposure. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| aspect_enterprise 3.08 | earliest → 3.08.01 | No fix stated |
| nexus_series 3.08 | earliest → 3.08.01 | No fix stated |
| matrix_series 3.08 | earliest → 3.08.01 | No fix stated |
| ASPECT-Enterprise 3.08 | earliest → 3.08.02 | No fix stated |
| NEXUS Series 3.08 | earliest → 3.08.02 | No fix stated |
| MATRIX Series 3.08 | earliest → 3.08.02 | No fix stated |
Other CVEs of aspect_enterprise
The 21 CVEs of aspect_enterprise →
CVE-2024-51551
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default…
10.0
Critical
CVE-2024-51550
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected…
9.3
Critical
CVE-2024-51549
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products:…
10.0
Critical
CVE-2024-51548
Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise…
8.7
High