5.9
Moyenne
CVE-2024-8530 CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data…
Description
CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause exposure of private data when an already generated “logcaptures” archive is accessed directly by HTTPS.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Data Center Expert | Versions non publiées | |
| data_center_expert 8.1 | premières → 8.1.1.3 | Pas de correctif indiqué |
Autres CVE de Data Center Expert
Les 6 CVE de Data Center Expert →
CVE-2024-8531
CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that could compromise the Data Center…
7.2
Élevée
CVE-2022-32520
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE…
8.0
Élevée
CVE-2022-32521
A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the…
7.1
Élevée
CVE-2022-32518
A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE…
8.0
Élevée