Aller au contenu
en Se connecter
8.8 Élevée

CVE-2026-89293 In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…

Description

In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to perform actions that are only allowed to be executed by an authorized Mnestix user, like changing the Infrastructure settings or calling the connected and authenticated Mnestix AAS Generator backend.

Produits et versions touchés

Produit Versions touchées Corrigé en
Eclipse Mnestix 1.2 1.2.0 → < 2.3.0 2.3.0

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Eclipse Mnestix

Les 3 CVE de Eclipse Mnestix →
CVE-2026-89295 In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the… Non notée CVE-2026-89292 In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker… 9.2 Critique
Suivre cette CVE