mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
71 lines
2.5 KiB
JSON
71 lines
2.5 KiB
JSON
|
{
|
||
|
|
"CVE_data_meta": {
|
||
|
|
"ASSIGNER": "productcert@siemens.com",
|
||
|
|
"ID": "CVE-2019-13947",
|
||
|
|
"STATE": "PUBLIC"
|
||
|
|
},
|
||
|
|
"data_format": "MITRE",
|
||
|
|
"data_version": "4.0",
|
||
|
|
"data_type": "CVE",
|
||
|
|
"affects": {
|
||
|
|
"vendor": {
|
||
|
|
"vendor_data": [
|
||
|
|
{
|
||
|
|
"vendor_name": "Siemens AG",
|
||
|
|
"product": {
|
||
|
|
"product_data": [
|
||
|
|
{
|
||
|
|
"product_name": "SiNVR 3 Central Control Server (CCS)",
|
||
|
|
"version": {
|
||
|
|
"version_data": [
|
||
|
|
{
|
||
|
|
"version_value": "all versions"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"product_name": "SiNVR 3 Video Server",
|
||
|
|
"version": {
|
||
|
|
"version_data": [
|
||
|
|
{
|
||
|
|
"version_value": "all versions"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
},
|
||
|
|
"problemtype": {
|
||
|
|
"problemtype_data": [
|
||
|
|
{
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "eng",
|
||
|
|
"value": "CWE-317: Cleartext Storage of Sensitive Information in GUI"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"description": {
|
||
|
|
"description_data": [
|
||
|
|
{
|
||
|
|
"lang": "eng",
|
||
|
|
"value": "A vulnerability has been identified in SiNVR 3 Central Control Server (CCS) (all versions), SiNVR 3 Video Server (all versions). The user configuration menu in the web interface of the SiNVR 3\nCentral Control Server (CCS) transfers user passwords in clear to the\nclient (browser).\n\nAn attacker with administrative privileges for the web interface could be\nable to read (and not only reset) passwords of other SiNVR 3 CCS users.\n"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"references": {
|
||
|
|
"reference_data": [
|
||
|
|
{
|
||
|
|
"refsource": "CONFIRM",
|
||
|
|
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-761617.pdf"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
}
|