CVE-2016-8361
HighSummary
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to the use of a hard-coded username without a password, allowing an attacker to access the system without authentication.
Risk Assessment
Lack of authentication may lead to unauthorized access to the system, posing a serious threat to the security of data and operations within the organization.
Recommendation
It is recommended to update the application to the latest version and implement authentication mechanisms to secure the system against unauthorized access.
Other vulnerabilities in Lynxspring JENEsys BAS Bridge
See all- CVE-2016-8369High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient verification of whether a request was intentionally provided by the user. This leads to a vulnerability to Cross-Site Request Forgery (CSRF) attacks.
- CVE-2016-8357High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands.
- CVE-2016-8378Critical
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient safeguards in the application's database for protecting credentials.
Original NVD description (English source)
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authentication.