Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials
Vulnerability Description
Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
Vulnerability Type
凭证传输未经安全保护
Vulnerability Title
Kiteworks Secure Data Forms 安全漏洞
Vulnerability Description
Kiteworks Secure Data Forms是美国Kiteworks公司的一款提供安全数据收集与表单提交管理能力的数据交互工具。 Kiteworks Secure Data Forms 9.2.1之前版本存在安全漏洞,该漏洞源于安全属性配置不当,可能导致凭据传输未受保护。
CVSS Information
N/A
Vulnerability Type
N/A