Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•12 views

CVE-2022-3187: Improper Authorization

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where certain PHP pages only validate when a valid connection is established with the database. However, these PHP pages do not verify the validity of a user. Attackers could leverage this lack of verification to read...

5.3CVSS5.8AI score0.00482EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/21 12:00 a.m.•9 views

PT-2022-20970

Name of the Vulnerable Software and Affected Versions Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 Description The issue allows unauthenticated users to open PHP index pages without authentication and download the history file from the device. The history file includes the latest action...

5.3CVSS0.00551EPSS
SaveExploits0References5
Rows per page
Query Builder