CVE-2018-1000631

Mô tả

Tham khảo

• exchange.xforce.ibmcloud.com/vulnerabilities/147308 · Third Party Advisory

Lỗ hổng khác của v2i hub

• CVE-2018-1000630CAO 7.2Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/P…
• CVE-2018-1000629TRUNG BÌNH 6.1Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigAction…
• CVE-2018-1000628NGHIÊM TRỌNG 9.8Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a…
• CVE-2018-1000627NGHIÊM TRỌNG 9.8Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API ke…
• CVE-2018-1000626NGHIÊM TRỌNG 9.8Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the defaul…