Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Italtel Embrace 1.6.4. The web application inserts the access token of an authenticated user inside GET requests. The query string for the URL could be saved in the browser's history, passed through Referers to other web sites, stored in web logs, or otherwise recorded in other sources. If the query string contains sensitive information such as session identifiers, then attackers can use this information to launch further attacks. Because the access token in sent in GET requests, this vulnerability could lead to complete account takeover.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Italtel Embrace 安全漏洞
Vulnerability Description
Italtel Embrace是Italtel公司的一款款仅限软件且支持云的 Web 应用程序服务器。可用于在 TLC 网络中启用 WebRTC 服务或作为独立的 WebRTC 服务。 Italtel Embrace 1.6.4版本存在安全漏洞，该漏洞源于web应用程序将已认证用户的访问令牌插入到GET请求中，URL的查询字符串可能会被保存在多种来源中，攻击者可以利用查询字符串中的敏感信息发起攻击，可能导致账户被完全接管。
CVSS Information
N/A
Vulnerability Type
N/A