CVE-2016-8378
CriticalSummary
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient safeguards in the application's database for protecting credentials.
Risk Assessment
The lack of adequate safeguards may lead to unauthorized access to sensitive data, posing a serious security threat to the organization.
Recommendation
It is recommended to update the application to the latest version that includes security patches to protect credentials from unauthorized access.
Other vulnerabilities in Lynxspring JENEsys BAS Bridge
See all- CVE-2016-8369High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to insufficient verification of whether a request was intentionally provided by the user. This leads to a vulnerability to Cross-Site Request Forgery (CSRF) attacks.
- CVE-2016-8361High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older related to the use of a hard-coded username without a password, allowing an attacker to access the system without authentication.
- CVE-2016-8357High
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands.
Original NVD description (English source)
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks sufficient safeguards for protecting credentials.