CVE-2025-30236

8.6HIGH

Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 allows authentication through only a six-digit TOTP code (skipping a password check) if an HTTP POST request contains a SESSION parameter.

게시됨: 3/19/2025업데이트됨: 3/19/2025
NVD에서 보기MITRE에서 보기

설명

Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 allows authentication through only a six-digit TOTP code (skipping a password check) if an HTTP POST request contains a SESSION parameter.

AI 분석AI 기반

참조