Axios Italia Axios RE 1.7.0/7.0.0 Error Message ASP.NET information disclosure – DigitalMunition




Exploit Cybersecurity study of the dark web exposes vulnerability to machine identities -- ScienceDaily

Published on August 6th, 2019 📆 | 6406 Views ⚑

0

Axios Italia Axios RE 1.7.0/7.0.0 Error Message ASP.NET information disclosure

CVSS Meta Temp Score Current Exploit Price (≈)
4.9 $0-$5k

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects an unknown code block of the component Error Message Handler. The manipulation with an unknown input leads to a information disclosure vulnerability (ASP.NET). Using CWE to declare the problem leads to CWE-200. Impacted is confidentiality.

The weakness was shared 08/06/2019 by ErPaciocco as VulDB 139529 as unconfirmed entry (VulDB). The advisory is shared at vuldb.com. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details are unknown but an exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/06/2019).

It is declared as proof-of-concept.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entry 139528 is related to this item.

Vendor

Name

VulDB Meta Base Score: 5.3
VulDB Meta Temp Score: 4.9

VulDB Base Score: 5.3
VulDB Temp Score: 4.9
VulDB Vector: 🔒
VulDB Reliability: 🔍


VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Class: Information disclosure / ASP.NET (CWE-200)
Local: No
Remote: Yes

Availability: 🔒
Status: Proof-of-Concept

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: no mitigation known
Status: 🔍

0-Day Time: 🔒

08/06/2019 Advisory disclosed
08/06/2019 +0 days VulDB entry created
08/06/2019 +0 days VulDB last updateAdvisory: VulDB 139529
Researcher: ErPaciocco
Status: Unconfirmed
scip Labs: https://www.scip.ch/en/?labs.20161013
See also: 🔒Created: 08/06/2019 07:54 AM
Complete: 🔍

Comments

No comments yet. Please log in to comment.

Download it now for free!

https://vuldb.com/?id.139529

Free Download WordPress Themes
Download Nulled WordPress Themes
Download Premium WordPress Themes Free
Premium WordPress Themes Download
udemy paid course free download

Tagged with:



Leave a Reply ✍


loading...