CVE-2022-34771

概要

参考情報

• gov.il/en/departments/faq/cve_advisories · Third Party Advisory

tabit のその他の脆弱性

• CVE-2022-34776高 7.5Tabit - giftcard stealth. Several APIs on the web system display, without authorization, sensitive information such as health statements, pr…
• CVE-2022-34775高 7.5Tabit - Excessive data exposure. Another endpoint mapped by the tiny url, was one for reservation cancellation, containing the MongoDB ID of…
• CVE-2022-34774中 5.3Tabit - Arbitrary account modification. One of the endpoints mapped by the tiny URL, was a page where an adversary can modify personal detai…
• CVE-2022-34773緊急 9.8Tabit - HTTP Method manipulation. https://bridge.tabit.cloud/configuration/addresses-query - can be POST-ed to add addresses to the DB. This…
• CVE-2022-34772高 8.8Tabit - password enumeration. Description: Tabit - password enumeration. The passwords for the Tabit system is a 4 digit OTP. One can resend…