Description (CNA)
CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CHANGING / Mobile One Time Password | affected earlier through 3.11.2 |
CWE
CWE-23
References
- https://www.twcert.org.tw/tw/cp-132-7911-0962e-1.html
- https://www.twcert.org.tw/en/cp-139-7912-4c800-2.html
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.