CVE-2018-17218

Description

References

• ptc.com/en/support/article · Vendor Advisory

thingworx platform의 다른 취약점

• CVE-2018-20092높음 7.5PTC ThingWorx Platform through 8.3.0 is vulnerable to a directory traversal attack on ZIP files via a POST request.
• CVE-2018-17217높음 7.5An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is a hardcoded encryption key.
• CVE-2018-17216보통 6.5An issue was discovered in PTC ThingWorx Platform 6.5 through 8.2. There is password hash exposure to privileged users.