Authentication flaw

2015-07-2618:59:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.5%

JSON

Honeywell Tuxedo Touch before 5.2.19.0_VA relies on client-side authentication involving JavaScript, which allows remote attackers to bypass intended access restrictions by removing USERACCT requests from the client-server data stream.

CPENameOperatorVersion
tuxedo_toucheq<= 5.1.13.0-va

CPE	Name	Operator	Version
	tuxedo_touch	eq	<= 5.1.13.0-va

References

www.kb.cert.org/vuls/id/857948