CVE-2016-2296

Critical

Published: 14/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for 'post-admin' login pages, allowing remote attackers to obtain sensitive information or modify data via unspecified vectors.

Risk Assessment

The lack of authentication on login pages poses a serious security risk, enabling attackers to access sensitive information and potentially modify it.

Recommendation

It is recommended to implement authentication requirements for all login pages, including 'post-admin', to secure the system against unauthorized access.

Original NVD description (English source)

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.