Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Innovative Interfaces Encore Discovery Solution 4.3 places a session token in the URI, which might allow remote attackers to obtain sensitive information via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Innovative Interfaces Encore Discovery Solution 安全漏洞
Vulnerability Description
Innovative Interfaces Encore Discovery Solution是美国Innovative Interfaces公司的一套资源发现系统。该系统基于庞大的元数据集合，通过类似Google的简单检索框，采用统一的路径，实现对图书馆各种资源的发现和获取。 Innovative Interfaces Encore Discovery Solution 4.3版本中存在安全漏洞，该漏洞源于URI中存储会话令牌。远程攻击者可利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A