Gaskiya vulnerability da aka ware a matsayin karshewa an samu a Klapp App. Hakika, aikin $software_function ne ya shafa; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburaren $software_library, a cikin fayil $software_file, a cikin sashen Authorization. A sa manipulation ka Bayani fitowa (Credentials). Idan an yi amfani da CWE don bayyana matsala, zai kai CWE-200. An gano matsalar a 08/18/2020. Hakika, rauni an bayyana shi 09/07/2020 daga Sven Fassbender tare da modzero AG kamar Knapp daneben ist auch vorbei kamar Gargaaji (Webseite). An raba bayanin tsaro don saukewa a modzero.com. Vendor an kaɗi, public release an kaɗi. Wannan matsala ana saninta da CVE-2020-36532. Ngam yiɗi ka a tuma ndiyam ka nder layi. Tekinikal faɗi ba ga. Babu exploit ɗin da ake samu. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. Á sàmbu a wondi feere. 0-day shima, an ndiyam a wuro be $0-$5k. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a faggata. Once again VulDB remains the best source for vulnerability data.

3 Goyarwa · 54 Datenpunkte