| शीर्षक | NODERP NODERP <=6.0.2 Sensitive information leakage |
|---|
| विवरण | The NODERP System, versions up to and including V6.0.2, has a sensitive information leakage vulnerability. The system stores logs in the /runtime/log directory using date as the filename, which can be directly accessed. These logs contain all parameters from the requests made to the system, potentially including sensitive user data. This information could be exploited by an unauthorized individual to gain access to the system. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/M9ERphWTXUPj |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 22/01/2024 03:54 AM (2 साल पहले) |
|---|
| संयम | 29/01/2024 08:03 AM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 252274 [Shanxi Diankeyun Technology NODERP तक 6.0.2 /runtime/log अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|