5.9
Medium
CVE-2024-8530 CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data…
Description
CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcaptures” archive is accessed directly by HTTPS.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Data Center Expert | Versions not published | |
| data_center_expert 8.1 | earliest → 8.1.1.3 | No fix stated |
Other CVEs of Data Center Expert
The 6 CVEs of Data Center Expert →
CVE-2024-8531
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center…
7.2
High
CVE-2022-32520
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE…
8.0
High
CVE-2022-32521
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the…
7.1
High
CVE-2022-32518
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE…
8.0
High