CVE-2023-29502

概要

参考情報

• https//www.cisa.gov/news-events/ics-advisories/icsa-23-131-13 · Broken Link
• cisa.gov/news-events/ics-advisories/icsa-23-131-13 · Third Party Advisory

vuforia studio のその他の脆弱性

• CVE-2023-31200高 8.0 PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery a…
• CVE-2023-29168高 7.5The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication.
• CVE-2023-29152高 8.1 By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account. …
• CVE-2023-27881緊急 9.9 A user could use the “Upload Resource” functionality to upload files to any location on the disk.
• CVE-2023-24476低 3.3 An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authe…