CVE-2021-3131

CVE-2021-3131 建议描述 1C:Enterprise 8 中版本低于 8.3.17.1851 的 Web 服务器会在 'creds' URL 参数中发送 base64 编码的凭据。 漏洞类型 其他 CWE-522 凭据保护不足 产品供应商 1C 公司 受影响产品代码库 1C:Enterprise 8 - 测试版本: 8.3.17.1851 受影响组件 Web 服务器 影响信息泄露 true 供应商是否确认或承认此漏洞？ true 发现者 Irina Belyaeva Jet Infosystems, jet.su 参考...

EUVD-2021-26479

Malware in sbrugna...

CVE-2021-3131

The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter...

Design/Logic Flaw

The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter...

CVE-2021-3131

The CVE concerns the Web server in 1C:Enterprise 8, prior to version 8.3.17.1851, which transmits credentials in base64 via the creds URL parameter. The issue is confirmed by multiple connected sources, including PT-2021-19235, which specifies affected versions as 1C:Enterprise 8 before 8.3.17.18...

CVE-2021-3131

The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter...

CVE-2021-3131: Inadequate Encryption Strength

The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter...