Authentication flaw

2019-07-1721:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.9%

Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services (such as Gmail, Outlook, etc.) used in the application.

CPENameOperatorVersion
shiftle3.4.3

CPE	Name	Operator	Version
	shift	le	3.4.3

References

support.tryshift.com/kb/article/206-shift-34-released-on-january-23-2019/