CVE:CVE-2019-6716
CNNVD:CNNVD-201901-955
LongBox Access Manager是一款访问管理软件。
LongBox Access Manager 1.2版本至1.4-RG3版本中存在安全漏洞。远程攻击者可利用该漏洞枚举内部Active Directory用户名并可能枚举Active Directory组群名及更改后端服务器的任务。
solution:Upgrade logonbox nervepoint_access_manager to a higher version than 1.2:rg10,1.2:rg3,1.2:rg4,1.2:rg5,1.2:rg6,1.2:rg7,1.2:rg8,1.2:rg9,1.3:rg,1.3:rg1,1.3:rg2,1.3:rg3,1.3:rg4,1.3:rg5,1.3:rg6,1.3:rg7,1.3:rg8,1.4:rg,1.4:rg1,1.4:rg2,1.4:rg3,and avoid the version 1.2:rg10,1.2:rg3,1.2:rg4,1.2:rg5,1.2:rg6,1.2:rg7,1.2:rg8,1.2:rg9,1.3:rg,1.3:rg1,1.3:rg2,1.3:rg3,1.3:rg4,1.3:rg5,1.3:rg6,1.3:rg7,1.3:rg8,1.4:rg,1.4:rg1,1.4:rg2,1.4:rg3