CVE-2023-3897

概要

参考情報

• packetstormsecurity.com/files/177179/SureMDM-On-Premise-CAPTCHA-Bypass-User-Enumeration.html
• 42gears.com/security-and-compliance · Vendor Advisory

suremdm のその他の脆弱性

• CVE-2018-15659中 6.5An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight applications. Cross-origin access…
• CVE-2018-15658高 7.5An issue was discovered in 42Gears SureMDM before 2018-11-27. By visiting the page found at /console/ConsolePage/Master.html, an attacker is…
• CVE-2018-15657高 7.3An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
• CVE-2018-15656高 7.5An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27. An attacker can submit a GET request to /api/…
• CVE-2018-15655中 6.5An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings. Cross-origin access is possible.