漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Automated Logic WebCTRL and Carrier i-Vu Session Fixation
Vulnerability Description
Storing Passwords in a Recoverable Format vulnerability in Automated Logic WebCTRL on Windows, Carrier i-Vu on Windows. Storing Passwords in a Recoverable Format vulnerability (CWE-257) in the Web session management component allows an attacker to access stored passwords in a recoverable format which makes them subject to password reuse attacks by malicious users.This issue affects WebCTRL: from 6.0 through 9.0; i-Vu: from 6.0 through 9.0.
CVSS Information
N/A
Vulnerability Type
以可恢复格式存储口令
Vulnerability Title
Carrier i-Vu和Carrier Automated Logic WebCTRL 安全漏洞
Vulnerability Description
Carrier i-Vu和Carrier Automated Logic WebCTRL都是美国Carrier公司的产品。Carrier i-Vu是一个楼宇管理系统平台。Carrier Automated Logic WebCTRL是一个楼宇自动化系统。 Carrier i-Vu和Carrier Automated Logic WebCTRL 6.0版本至9.0版本存在安全漏洞,该漏洞源于Web会话管理组件以可恢复格式存储密码,可能导致密码重用攻击。
CVSS Information
N/A
Vulnerability Type
N/A