Wednesday, January 31, 2018

SEC Consult SA-20180131-0 :: Multiple Vulnerabilities in Sprecher Automation SPRECON-E-C ...

vulnerability. A user which is authenticated on the web interface, which is intended as read-only interface, can download files with the permissions of the webserver (www-data). Files like "/etc/shadow" are not readable for the webserver. 2) Client-Side Password Hashing The password hashes which are ...

from Google Alert - vulnerability http://ift.tt/2EpzuK8
via IFTTT

No comments:

Post a Comment