ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2020-36887
7.5высокая

CVE-2020-36887

Описание

SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenticated information disclosure vulnerability in the database backup directory. Attackers can access the /content/files/backups/ endpoint to download sensitive backup files containing user credentials and system information.

Затрагиваемое ПО
Spinetix Fusion digital signage
CVSS
Балл7.5 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Источники
https://www.exploit-db.com/exploits/48845https://www.spinetix.comhttps://www.vulncheck.com/advisories/spinetix-fusion-digital-signage-unauthenticated-database-backup-disclosurehttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5593.phphttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5593.php