CVE-2023-31200

Description

References

• https//www.cisa.gov/news-events/ics-advisories/icsa-23-131-13 · Broken Link
• cisa.gov/news-events/ics-advisories/icsa-23-131-13 · Third Party Advisory

Altre vulnerabilità di vuforia studio

• CVE-2023-29502MEDIO 4.3 Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.json file to be a diff…
• CVE-2023-29168ALTO 7.5The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication.
• CVE-2023-29152ALTO 8.1 By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account. …
• CVE-2023-27881CRITICO 9.9 A user could use the “Upload Resource” functionality to upload files to any location on the disk.
• CVE-2023-24476BASSO 3.3 An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authe…