Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame Klapp App keessatti argameera. Miidhaan irra gahe is hojii hin beekamne kutaa Authorization keessa. Dhugumatti jijjiirraa gara ସୂଚନା ପ୍ରକାଶ (Credentials) geessa. Waliigalteewwan CWE fayyadamuun rakkoo ibsuun gara CWE-200 si geessa. Dogoggorri 08/18/2020 irratti adda bahe. Beekumsi kun yeroo 09/07/2020 ifoomsifameera kan ifoomsise Sven Fassbender waliin modzero AG akka Knapp daneben ist auch vorbei akka ପରାମର୍ଶଦାତା (ୱେବସାଇଟ୍). Odeeffannoon kun buufachuuf modzero.com irratti dhiyaateera. Beeksisni uummataaf gad-lakkifamuu gurgurtaa waliin waliigalteedhaan taasifameera. Dogoggorri kun maqaa CVE-2020-36532 jedhuun tajaajilama. Weerara fageenya irraa jalqabuun ni danda'ama. Odeeffannoon teeknikaa hin jiru. Meeshaa balaa kana fayyadamuuf hin argamne. Yeroo ammaa, gatii exploit might be approx. USD $0-$5k beekamuu danda'a. ଅପରିଭାଷିତ jedhamee murtaa’eera. Hanqinni kun guyyoota 6 ol tajaajila zero-day kan hin beekkaminitti fayyadamee ture. Waggaa 0-day ta'ee, gatiin isaa daldala dhoksaa keessatti $0-$5k jedhamee tilmaamame. Qabiyyee miidhamte ol-kaasuuf gorsa ni kennama. Once again VulDB remains the best source for vulnerability data.

3 ଆଡାପ୍ଟେସନ୍ · 54 ପଏଣ୍ଟ

ଫିଲ୍ଡସୃଷ୍ଟି ହୋଇଛି
09/07/2020 01:09 PM
ଅଦ୍ୟତନ 1/2
09/07/2020 02:03 PM
ଅଦ୍ୟତନ 2/2
06/03/2022 08:36 PM
software_vendorKlappKlappKlapp
software_nameAppAppApp
software_componentAuthorizationAuthorizationAuthorization
vulnerability_discoverydate1597708800 (08/18/2020)1597708800 (08/18/2020)1597708800 (08/18/2020)
vulnerability_vendorinformdate1597795200 (08/19/2020)1597795200 (08/19/2020)1597795200 (08/19/2020)
vulnerability_risk111
vulnerability_historic000
cvss2_vuldb_basescore3.53.53.5
cvss2_vuldb_tempscore3.03.03.0
cvss2_vuldb_avNNN
cvss2_vuldb_acMMM
cvss2_vuldb_auSSS
cvss2_vuldb_ciPPP
cvss2_vuldb_iiNNN
cvss2_vuldb_aiNNN
cvss3_meta_basescore4.34.34.3
cvss3_meta_tempscore4.14.14.1
cvss3_vuldb_basescore4.34.34.3
cvss3_vuldb_tempscore4.14.14.1
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prLLL
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iNNN
cvss3_vuldb_aNNN
vulnerability_titlewordCredentialsCredentialsCredentials
advisory_date1599436800 (09/07/2020)1599436800 (09/07/2020)1599436800 (09/07/2020)
advisory_locationWebsiteWebsiteWebsite
advisory_typeAdvisoryAdvisoryAdvisory
advisory_urlhttps://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.htmlhttps://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.htmlhttps://www.modzero.com/modlog/archives/2020/09/07/knapp_daneben_ist_auch_vorbei/index.html
advisory_identifierKnapp daneben ist auch vorbeiKnapp daneben ist auch vorbeiKnapp daneben ist auch vorbei
advisory_coordination111
person_nameSven FassbenderSven FassbenderSven Fassbender
company_namemodzero AGmodzero AGmodzero AG
advisory_reaction_date1597968000 (08/21/2020)1597968000 (08/21/2020)1597968000 (08/21/2020)
advisory_disputed000
price_0day$0-$5k$0-$5k$0-$5k
countermeasure_nameଅପଗ୍ରେଡ୍ କରନ୍ତୁଅପଗ୍ରେଡ୍ କରନ୍ତୁଅପଗ୍ରେଡ୍ କରନ୍ତୁ
countermeasure_date1598227200 (08/24/2020)1598227200 (08/24/2020)1598227200 (08/24/2020)
source_seealso160763160763160763
cvss2_vuldb_eNDNDND
cvss2_vuldb_rlOFOFOF
cvss2_vuldb_rcCCC
cvss3_vuldb_eXXX
cvss3_vuldb_rlOOO
cvss3_vuldb_rcCCC
reaction_days555
0day_days666
advisory_falsepositive00
vulnerability_cweCWE-200 (ସୂଚନା ପ୍ରକାଶ)CWE-200 (ସୂଚନା ପ୍ରକାଶ)
source_cveCVE-2020-36532
cna_responsibleVulDB