Unauthenticated Access to Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited Login Pages
CVE-2016-2296 · HIGH Severity
AV:N/AC:L/AU:N/C:P/I:P/A:P
Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors.
Learn more about our Web App Pen Testing.