Unauthenticated Information Disclosure Vulnerability in TotalAlert Web Application

CVE-2018-7526 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, by accessing a specific uniform resource locator (URL) on the webserver, a malicious user may be able to access information in the application without authenticating.

Learn more about our Web App Pen Testing.