SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by querying for known files using the REST API directly.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSick Package Analytics
APPSick≤ 04.0.0
Powiązane podatności
SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass...
A remote unauthorized attacker may gather sensitive information of the application, due to missing authorizati...
In the HTTP request, the username and password are transferred directly in the URL as parameters. However, URL...
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint...
Multiple endpoints with sensitive information do not require authentication, making the application susceptibl...