fixed unmarshal errors

This commit is contained in:
Ritik Chaddha
2025-11-06 11:30:41 +05:30
committed by GitHub
parent c22d1f0457
commit f74845198e

View File

@@ -1,12 +1,12 @@
id: CVE-2024-0799
info:
name: Arcserve Unified Data Protection - wizardLogin Authentication Bypass
name: Arcserve Unified Data Protection - Authentication Bypass
author: daffainfo
severity: critical
description: |
An authentication bypass vulnerability exists in Arcserve Unified Data Protection 9.2 and 8.1 in the edge-app-base-webui.jar!com.ca.arcserve.edge.app.base.ui.server.EdgeLoginServiceImpl.doLogin() function within wizardLogin.
imapct: |
impact: |
Attackers can bypass authentication, gaining unauthorized access to the system.
remediation: |
Update to the latest version of Arcserve Unified Data Protection or apply security patches provided by the vendor.
@@ -23,7 +23,7 @@ info:
cpe: cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
max-request: 2
vendor: arcserve
product: udp
shodan-query: http.favicon.hash:1015186617