CVE-2023-27881

Mô tả

Tham khảo

• https//www.cisa.gov/news-events/ics-advisories/icsa-23-131-13 · Broken Link
• cisa.gov/news-events/ics-advisories/icsa-23-131-13 · Third Party Advisory

Lỗ hổng khác của vuforia studio

• CVE-2023-31200CAO 8.0 PTC Vuforia Studio does not require a token; this could allow an attacker with local access to perform a cross-site request forgery a…
• CVE-2023-29502TRUNG BÌNH 4.3 Before importing a project into Vuforia, a user could modify the “resourceDirectory” attribute in the appConfig.json file to be a diff…
• CVE-2023-29168CAO 7.5The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication.
• CVE-2023-29152CAO 8.1 By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account. …
• CVE-2023-24476THẤP 3.3 An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authe…