CVE-2019-11367

An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully.

An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully.

Se descubrió un problema en AUO Solar Data Recorder antes del 1.3.0. El portal web utiliza la identifcaciónbásica HTTP y proporciona la cuenta y la contraseña en el atributo WWW-Authenticate. Al usar esta cuenta y contraseña, cualquiera puede iniciar sesión correctamente.