CVE-2026-94460:详情

CVE-2026-94460

2026-11-04
10h17 +00:00
A01-Broken Access Control
2026-11-09
22h18 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-276 Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.

参考资料