CVE-2023-29152

概要

参考情報

• https//www.cisa.gov/news-events/ics-advisories/icsa-23-131-13 · Broken Link
• cisa.gov/news-events/ics-advisories/icsa-23-131-13 · Third Party Advisory

vuforia studio のその他の脆弱性

• CVE-2023-31200高 8.0 PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery a…
• CVE-2023-29502中 4.3 Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.json file to be a diff…
• CVE-2023-29168高 7.5The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication.
• CVE-2023-27881緊急 9.9 A user could use the “Upload Resource” functionality to upload files to any location on the disk.
• CVE-2023-24476低 3.3 An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authe…