GE Digital APM Classic
Successful exploitation of these vulnerabilities could allow access to sensitive information.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-16244US | high7.2 | — | ||
GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords. This design flaw, along with the IDOR v… | ||||
| CVE-2020-16240US | medium5.3 | — | ||
GE Digital APM Classic, Versions 4.4 and prior. An insecure direct object reference (IDOR) vulnerability allows user account data to be downloaded in JavaScript object notation (JS… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationAPM Classic
The GE user advisory can be accessed on the GE Digital Support Customer Center website (login required).
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdigitalsupport.ge.com%2Fcommunities%2Fen_US%2FArticle%2FGE-Digital-Security-Advisory-GED-20-04&data=02%7C01%7Ckent.norris%40inl.gov%7C62b1454f1f0643abf8fb08d85e33a0fe%7C4cf464b7869a42368da2a98566485554%7C0%7C0%7C637362923129050441&sdata=Ls9sA%2F%2BY9wysaTIide8rz4KtQ2sWgxWtNoTKdShf0OI%3D&reserved=0 - MitigationAPM Classic
The GE user advisory can be accessed on the GE Digital Support Customer Center website (login required).
https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdigitalsupport.ge.com%2Fcommunities%2Fen_US%2FArticle%2FGE-Digital-Security-Advisory-GED-20-04&data=02%7C01%7Ckent.norris%40inl.gov%7C62b1454f1f0643abf8fb08d85e33a0fe%7C4cf464b7869a42368da2a98566485554%7C0%7C0%7C637362923129050441&sdata=Ls9sA%2F%2BY9wysaTIide8rz4KtQ2sWgxWtNoTKdShf0OI%3D&reserved=0 - BehobenAPM Classic
GE Digital APM Classic 4.5 contains mitigations for these vulnerabilities. GE Digital recommends all users upgrade to GE Digital APM Classic 4.5 or newer. Other recommendations may mitigate issues, but only installing the most current version will fully address the issue. To obtain the latest version of this product, please contact a GE Digital representative.
https://digitalsupport.ge.com/communities/CC_Contact - BehobenAPM Classic
GE Digital APM Classic 4.5 contains mitigations for these vulnerabilities. GE Digital recommends all users upgrade to GE Digital APM Classic 4.5 or newer. Other recommendations may mitigate issues, but only installing the most current version will fully address the issue. To obtain the latest version of this product, please contact a GE Digital representative.
https://digitalsupport.ge.com/communities/CC_Contact
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan