Description
eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://seclists.org/fulldisclosure/2015/Dec/118 ↗
- http://packetstormsecurity.com/files/135069/eWON-XSS-CSRF-Session-Management-RBAC-Issues.html ↗
- http://ewon.biz/support/news/support/ewon-security-enhancement-7529-01 ↗
- https://ics-cert.us-cert.gov/advisories/ICSA-15-351-03 ↗
- http://www.securityfocus.com/bid/79625 ↗