CVE-2015-2847

2015-07-2618:00:00

certcc

www.cve.org

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.5%

JSON

Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream.

References

www.kb.cert.org/vuls/id/857948