mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 17:21:36 +00:00
64 lines
2.5 KiB
JSON
64 lines
2.5 KiB
JSON
{
|
|
"id": "CVE-2024-4300",
|
|
"sourceIdentifier": "twcert@cert.org.tw",
|
|
"published": "2024-04-29T04:15:08.887",
|
|
"lastModified": "2024-11-21T09:42:34.457",
|
|
"vulnStatus": "Awaiting Analysis",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "E-WEBInformationCo. FS-EZViewer(Web) exposes sensitive information in the service. A remote attacker can obtain the database configuration file path through the webpage source code without login. Accessing this path allows attacker to obtain the database credential with the highest privilege and database host IP address. With this information, attackers can connect to the database and perform actions such as adding, modifying, or deleting database contents."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "E-WEBInformationCo. FS-EZViewer(Web) expone informaci\u00f3n confidencial en el servicio. Un atacante remoto puede obtener la ruta del archivo de configuraci\u00f3n de la base de datos a trav\u00e9s del c\u00f3digo fuente de la p\u00e1gina web sin iniciar sesi\u00f3n. Acceder a esta ruta permite al atacante obtener la credencial de la base de datos con el mayor privilegio y la direcci\u00f3n IP del host de la base de datos. Con esta informaci\u00f3n, los atacantes pueden conectarse a la base de datos y realizar acciones como agregar, modificar o eliminar contenidos de la base de datos."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "twcert@cert.org.tw",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
|
"baseScore": 9.8,
|
|
"baseSeverity": "CRITICAL",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH"
|
|
},
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 5.9
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "twcert@cert.org.tw",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-200"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://www.twcert.org.tw/tw/cp-132-7774-fbd01-1.html",
|
|
"source": "twcert@cert.org.tw"
|
|
},
|
|
{
|
|
"url": "https://www.twcert.org.tw/tw/cp-132-7774-fbd01-1.html",
|
|
"source": "af854a3a-2127-422b-91ae-364da2661108"
|
|
}
|
|
]
|
|
} |