Description
VISAM VBASE version 11.6.0.6 is vulnerable to improper access control via the web-remote endpoint, which may allow an unauthenticated user viewing access to folders and files in the directory listing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VISAM | VBASE Pro-RT/ Server-RT (Web Remote) | version 11.6.0.6 | — |
Advisories 1
- ICSA-21-308-01 VISAM VBASE Editor CISA ICS & IT advisories · Nov 4, 2021