CVE-2016-2296
CriticalSummary
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for 'post-admin' login pages, allowing remote attackers to obtain sensitive information or modify data via unspecified vectors.
Risk Assessment
The lack of authentication on login pages poses a serious security risk, enabling attackers to access sensitive information and potentially modify it.
Recommendation
It is recommended to implement authentication requirements for all login pages, including 'post-admin', to secure the system against unauthorized access.
Other vulnerabilities in Meteocontrol WEB'log Basic 100, Light, Pro, Pro Unlimited
See all- CVE-2016-2298Critical
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allow remote attackers to obtain sensitive cleartext information via unspecified vectors.
- CVE-2016-2297Critical
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via an 'access command shell-like feature.'
Original NVD description (English source)
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.