CVE-2019-5643: Computing For Good Basic Laboratory Information System

Описание

Оригинално описание

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation.

Засегнати продукти

• Computing For Good Basic Laboratory Information System: unspecified до 3.5

Вид слабост

• CWE-284 Неправилен контрол на достъпа

История

Други уязвимости в Computing For Good Basic Laboratory Information System

• 10.0CVE-2019-5644
• 10.0CVE-2019-5617

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-5643
• https://nvd.nist.gov/vuln/detail/CVE-2019-5643
• https://blog.rapid7.com/2019/09/10/r7-2019-09-cve-2019-5617-cve-2019-5643-cve-2019-5644-c4g-blis-authentication-and-authorization-vulnerabilities-fixed/