CVE-2024-40410

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption...

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

CVE-2024-40408

Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 contain an access control issue within the Create Profile section. This vulnerability allows an attacker to create arbitrary user profiles with elevated privileges , potentially leading to unauthorized access. To remediate this, us...

CVE-2024-40410

Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 are affected by a vulnerability involving a hardcoded cryptographic key used for encryption. This embedded key potentially allows for unauthorized access or exploitation. To mitigate the risks associated with this hardcoded key, us...

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

PT-2024-28831

Name of the Vulnerable Software and Affected Versions Cybele Software Thinfinity Workspace versions prior to 7.0.3.109 Description The issue is related to incorrect access control, allowing attackers to gain access to a secondary broker via a crafted request. This can potentially lead to...

CVE-2024-40404

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

Cybele Software Thinfinity Workspace security vulnerabilities

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 that stems from...

CVE-2024-40405

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

Cybele Software Thinfinity Workspace security vulnerabilities

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.3.109 that stems from...

CVE-2024-40407

A full path disclosure vulnerability exists in Cybele Software Thinfinity Workspace versions prior to v7.0.2.113 . Attackers can use unspecified vectors to obtain the root path of the application, which could be used to gain sensitive information about the application's structure. To remediate th...

PT-2024-28830 · Cybele · Thinfinity Workspace

Name of the Vulnerable Software and Affected Versions: Cybele Software Thinfinity Workspace versions prior to 7.0.2.113 Description: The issue is related to an access control problem in the API endpoint where Web Sockets connections are established. Recommendations: For versions prior to 7.0.2.11...

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

CVE-2024-40408

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

CVE-2024-40410: Use of Hard-coded Credentials

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain a hardcoded cryptographic key used for encryption...

CVE-2024-40408: Missing Authentication for Critical Function

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the Create Profile section. This vulnerability allows attackers to create arbitrary user profiles with elevated privileges...

CVE-2024-40405: Missing Authentication for Critical Function

Incorrect access control in Cybele Software Thinfinity Workspace before v7.0.3.109 allows attackers to gain access to a secondary broker via a crafted request...

CVE-2024-40404: Missing Authentication for Critical Function

Cybele Software Thinfinity Workspace before v7.0.2.113 was discovered to contain an access control issue in the API endpoint where Web Sockets connections are established...

CVE-2024-40407

A full path disclosure in Cybele Software Thinfinity Workspace before v7.0.2.113 allows attackers to obtain the root path of the application via unspecified vectors...

Cybele Software Thinfinity Workspace security vulnerabilities

Cybele Software Thinfinity Workspace is an integrated solution for virtualizing applications, desktops, data and accessing any host from a unified portal from Cybele Software, USA. A security vulnerability exists in Cybele Software Thinfinity Workspace prior to v7.0.2.113 that stems from improper...