Dismissed
by @pyrox0 Activity log
- Created automatic suggestion
- @pyrox0 removed package steamguard-cli
- @pyrox0 dismissed
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not …
Innominate mGuard before 7.6.4 and 8.x before 8.0.3 does not require authentication for snapshot downloads, which allows remote attackers to obtain sensitive information via a crafted HTTPS request.
References
- http://ics-cert.us-cert.gov/advisories/ICSA-14-189-02 x_refsource_MISC
- http://ics-cert.us-cert.gov/advisories/ICSA-14-189-02 x_refsource_MISC x_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-189-02
- http://ics-cert.us-cert.gov/advisories/ICSA-14-189-02 x_refsource_MISC x_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-189-02
- http://ics-cert.us-cert.gov/advisories/ICSA-14-189-02 x_refsource_MISC x_transferred
Affected products
n/a
- ==n/a
mGuard
- ==8.1.0
- ==8.1.1
- =<8.0.2
- ==8.0.3
- ==7.6.4