Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CHANGING Information Technology IDExpert - Arbitrary File Read through Path Traversal
Vulnerability Description
IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read arbitrary system files.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
绝对路径遍历
Vulnerability Title
CHANGING IDExpert 安全漏洞
Vulnerability Description
CHANGING IDExpert是中国CHANGING公司的一个基于零信任，集成 FIDO、生物识别、MFA 等各种机制的身份验证系统。 CHANGING IDExpert 2.5至2.8版本存在安全漏洞，该漏洞源于不正确地验证管理员界面中的特定参数，允许具有管理员权限的远程攻击者利用此漏洞读取任意系统文件。
CVSS Information
N/A
Vulnerability Type
N/A