CVE-2012-4688
0.49%V4
2012-12-31
11h00 +00:00
11h00 +00:00
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Deskripsi CVE
I-GEN opLYNX Central Authentication Bypass
The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support.Solusi CVE
i-GEN Solutions has released a new version, opLYNX 2.01.9, that resolves
this vulnerability. The new version is installed during logon and
automatically applied. Anthony Cicalla has tested the new version and
validated that it resolves the vulnerability. To manually obtain the new
version, ICS-CERT recommends customers contact i-GEN Solutions customer
service.i-GEN’s customer service, http://www.i-gen.com ,
support@i-gen.com
Informasi CVE
Kelemahan Terkait
| Nama Kelemahan | Sumber | |
|---|---|---|
| DEPRECATED: Authentication Bypass Issues This weakness has been deprecated because it covered redundant concepts already described in CWE-287. |
||
| Improper Authentication When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. |
Metrik
| Metrik | Skor | Tingkat keparahan | CVSS Vektor | Sumber |
|---|---|---|---|---|
| V2 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
EPSS
EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.
Skor EPSS
Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.
Persentil EPSS
Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.
Produk yang Disebutkan
Konfigurasi 0
I-gen>>Oplynx >> Version Hingga (termasuk) 2.01.8
