critical9.8
CVE-2019-11367
An issue was discovered in AUO Solar Data Recorder before 1.3.0.
Impact
An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Auo | Solar Data Recorder | before 1.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153151/AUO-Solar-Data-Recorder-Incorrect-Access-Control.html
- https://drive.google.com/file/d/1H1L5s14Omnx1eJAdRlRninnqUKLJ_xDA/view
- https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11367
- http://packetstormsecurity.com/files/153151/AUO-Solar-Data-Recorder-Incorrect-Access-Control.html
- https://drive.google.com/file/d/1H1L5s14Omnx1eJAdRlRninnqUKLJ_xDA/view
- https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11367