Control Id Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined	11
Access Management Software	1

Produkt

Control ID IDSecure	4
Control iD RHiD	3
Control iD iDSecure	2
Control iD Gerencia Web	2
Control iD IDSecure	1

Przeciwdziałanie

Official Fix	0
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	12

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	6
Unproven	0
Not Defined	6

Wektor dostępu

Not Defined	0
Physical	0
Local	0
Adjacent	4
Network	8

Uwierzytelnianie

Not Defined	0
High	1
Low	7
None	4

Interakcja z użytkownikiem

Not Defined	0
Required	3
None	9

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	3
≤6	1
≤7	1
≤8	3
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	3
≤6	1
≤7	1
≤8	3
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	1
≤4	6
≤5	0
≤6	0
≤7	3
≤8	2
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	3
≤8	1
≤9	0
≤10	5

CNA

≤1	0
≤2	0
≤3	1
≤4	3
≤5	0
≤6	0
≤7	2
≤8	0
≤9	0
≤10	1

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	4
<2k	8
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	9
<2k	3
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (4): Gerencia Web (2), IDSecure (5), RHiD (3), iDSecure (2)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2023-11-27	8.5	8.2	Control iD iDSecure weak authentication	Nieznany	Proof-of-Concept	Not Defined	0.00314	0.02	CVE-2023-6329
2023-08-16	4.2	4.1	Control iD Gerencia Web Cookie weak encryption	Nieznany	Proof-of-Concept	Not Defined	0.00063	0.03	CVE-2023-4392
2023-08-05	8.5	8.5	Control iD IDSecure sql injection	Nieznany	Not Defined	Not Defined	0.00113	0.02	CVE-2023-33367
2023-08-03	6.3	6.3	Control ID IDSecure denial of service	Nieznany	Not Defined	Not Defined	0.00061	0.00	CVE-2023-33369
2023-08-03	3.5	3.5	Control ID IDSecure API Route information disclosure	Nieznany	Not Defined	Not Defined	0.00049	0.00	CVE-2023-33368
2023-08-03	8.0	8.0	Control ID IDSecure weak encryption	Nieznany	Not Defined	Not Defined	0.00091	0.00	CVE-2023-33371
2023-08-03	5.5	5.5	Control ID IDSecure Main Web Server denial of service	Nieznany	Not Defined	Not Defined	0.00046	0.00	CVE-2023-33370
2023-05-04	7.5	7.3	Control iD RHiD privilege escalation	Nieznany	Proof-of-Concept	Not Defined	0.00126	0.03	CVE-2023-2524
2023-04-28	4.4	4.3	Control iD RHiD department cross site scripting	Nieznany	Not Defined	Not Defined	0.00062	0.06	CVE-2023-2421
2023-04-14	4.4	4.3	Control iD iDSecure Dispositivos Page cross site scripting	Nieznany	Proof-of-Concept	Not Defined	0.00045	0.04	CVE-2023-2044

2 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 2 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!