Siemens Polarion Subversion Webclient
As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-15789US | high8.1 | — | ||
A vulnerability has been identified in Polarion Subversion Webclient (All versions). The web interface could allow a Cross-Site Request Forgery (CSRF) attack if an unsuspecting use… | ||||
| CVE-2020-15788US | medium6.1 | — | ||
A vulnerability has been identified in Polarion Subversion Webclient (All versions). The Polarion subversion web application does not filter user input in a way that prevents Cross… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-436520: XSS and CSRF Vulnerabilities in Polarion Subversion Webclient - HTML Versionself
- ICS Advisory ICSA-20-252-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-20-252-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationPolarion Subversion Webclient
Do not open unknown links while working on Polarion Subversion webclient
- MitigationPolarion Subversion Webclient
Do not open unknown links while working on Polarion Subversion webclient
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan