www.icact.org

Member Login

TACT Journal Homepage

Author Homepage

Call for Paper

Paper Procedure

Paper Submission/Update

Invoice/Registration

CRF Submission/Update

Find My Paper

Statistics & History

Welcome Message

Committee

FAQ

Paper Archives

Outstanding Papers

Program & Proceedings

Presentation Platform

Hotel & Travel Info

Photo Gallery

Scheduler Login

Seminar

Archives Login

Sponsors

Virual Oral Question and Answer


IEEE/ICACT20220047 Question.5 Questioner: nyamai@cc.tuat.ac.jp 2022-02-15 오후 5:23:10	IEEE/ICACT20220047 Answer.5 Answer by Auhor g20004tt@edu.tuis.ac.jp 2022-02-15 오후 5:23:10
Thank you for your good presentation. I have some questions. What percentage of the total vulnerabilities are vulnerabilities No.1 and No.5? In particular, since vulnerability No.1 was not found in Word press 4.7.0, could you show us an actual example of software with vulnerability No.1?	Thanks for your questions. First, about the percentage of No.1 and No.5, we don't know how many of these vulnerabilities are included in the actual WebAPI. The reason for this is that the details are not described in the OWASP API TOP 10. Second, I will explain the No.1 example. The vulnerability that corresponds to No.1 is reported to be in Ghost CMS WebAPI. The Ghost vulnerability is a vulnerability that allows general users to access information that requires administrative authorization by using a specific endpoint that is not published in the reference. For more information on the Ghost vulnerability, please refer to the following link. https://medium.com/@zn9988/cve-2021-3271-ghost-cms-4-0-0-d174162482a4

Select Voice