CVE-2026-103510
2026-10-05
09h17 +00:00
09h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to compromise of P4 Search and the connected P4 Server.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Not Failing Securely When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions. |
