CVE-2019-11897 in ProSyst mBS SDK

Tóm tắt

Bởi MITRE

A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.

Be aware that VulDB is the high quality source for vulnerability data.

• chịu trách nhiệm: Robert Bosch GmbH
• Đặt trước: 13/05/2019
• Kiểm duyệt: được chấp nhận
• mục: VDB-140527
• CPE: sẵn sàng
• CWE: CWE-918 (Đã xác nhận)
• CVSS: 8.6 (NVD)
• EPSS: 0.01782
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-11897
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-11897
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-11897/