{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eTous les points d\u0027acc\u00e8s 3Com  OfficeConnect Wireless 11g (r\u00e9f\u00e9rence 3CRWE454G72) dont la  version de \u003cTT\u003efirmware\u003c/TT\u003e est ant\u00e9rieure \u00e0 la version  1.03.07A.\u003c/p\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 dans les points d\u0027acc\u00e8s 3Com OfficeConnect Wireless\n11g (r\u00e9f\u00e9rence 3CRWE454G72) permet \u00e0 un utilisateur mal intentionn\u00e9\nd\u0027acc\u00e9der, au travers de l\u0027interface web, \u00e0 des pages normalement\ncach\u00e9es contenant des informations sensibles telles que le nom et mot de\npasse de l\u0027administrateur.\n\n## Solution\n\nMettre \u00e0 jour le firmware en version 1.03.07A.  \nLe firmware est t\u00e9l\u00e9chargeable \u00e0 l\u0027adresse suivante :\n\n    http://webprd1.3com.com/swd/jsp/user/index.jsp?id=OCWAPG1\n",
  "cves": [],
  "initial_release_date": "2005-01-24T00:00:00",
  "last_revision_date": "2005-01-24T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 iDEFENSE 01.20.05 du 20 janvier 2005 :",
      "url": "http://www.idefense.com/application/poi/display?id=188"
    }
  ],
  "reference": "CERTA-2005-AVI-026",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2005-01-24T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Acc\u00e8s \u00e0 des informations sensibles non autoris\u00e9"
    }
  ],
  "summary": null,
  "title": "Vuln\u00e9rabilit\u00e9 des points d\u0027acc\u00e8s 3Com OfficeConnect Wireless 11g",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 iDEFENSE du 20 janvier 2005",
      "url": null
    }
  ]
}