54 matches found
CVE-2021-31585
The CVE-2021-31585 issue affects Accellion Kiteworks (before version 7.3.1). The root cause is an elevation-of-privilege flaw allowing a user with Admin privileges to generate SSH passwords that enable local access, effectively escalating privileges. Impact is described as privilege, authenticati...
PT-2021-19434
Name of the Vulnerable Software and Affected Versions Accellion Kiteworks versions prior to 7.4.0 Description The issue allows an authenticated user to perform SQL Injection via the LDAPGroup Search. Recommendations For versions prior to 7.4.0, update to version 7.4.0 or later to resolve the issu...
PT-2021-19433
Name of the Vulnerable Software and Affected Versions Accellion Kiteworks versions prior to 7.3.1 Description The issue allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access. Recommendations For versions prior to 7.3.1, update to...
Accellion Kiteworks SQL注入漏洞
Accellion kiteworks is a next-generation mobile file sharing and collaboration platform that improves enterprise productivity and security. A SQL injection vulnerability exists in Accellion Kiteworks versions prior to 7.4.0. An attacker could exploit the vulnerability to obtain sensitive database...
Accellion Kiteworks 安全漏洞
Accellion kiteworks is a next-generation mobile file sharing and collaboration platform that improves enterprise productivity and security. An elevation of privilege vulnerability exists in Accellion Kiteworks versions prior to 7.3.1. An attacker can exploit this vulnerability to access SSH...
CVE-2021-31586: Improper Neutralization of Special Elements used in an SQL Command
Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search...
CVE-2021-31585: Undefined Security Weakness
Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access...
Accellion kiteworks authentication bypass vulnerability
Accellion kiteworks is a next-generation mobile file sharing and collaboration platform that improves enterprise productivity and security. An authentication bypass vulnerability exists in versions of Accellion kiteworks prior to 2017.01.00. A remote attacker could exploit the vulnerability by...
CVE-2017-9421
Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token...
CVE-2017-9421
Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token...
CVE-2017-9421
Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token...
PT-2018-8508
Name of the Vulnerable Software and Affected Versions Accellion kiteworks versions prior to 2017.01.00 Description The issue allows remote attackers to bypass authentication and execute certain API calls on behalf of a web user. This is achieved by using a gathered token via a POST request to...
CVE-2017-9421: Improper Authentication
Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token via a POST request to /oauth/token...
Accellion Kiteworks Cross-Site Scripting Vulnerability
Accellion Kiteworks is the leading private cloud platform for secure content. A cross-site scripting vulnerability exists in versions of Accellion Kiteworks prior to 2016.03.00 due to the program failing to properly filter user-supplied parameters. Allowing an attacker to exploit the vulnerabilit...
Accellion Kiteworks Elevation of Privilege Vulnerability
Accellion Kiteworks is the leading private cloud platform for secure content. An elevation of privilege vulnerability exists in Accellion Kiteworks that allows authenticated KiteWorks users to elevate privileges...
Accellion Kiteworks Security Bypass Vulnerability
Accellion Kiteworks is the leading private cloud platform for secure content. A security bypass vulnerability exists in Accellion Kiteworks version 2016.03.00, which allows attackers to bypass security restrictions and perform unauthorized operations...
CVE-2016-5664
Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI...
CVE-2016-5663
Multiple cross-site scripting XSS vulnerabilities in oauthcallback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the 1 code, 2 error, or 3 errordescription parameter...
CVE-2016-5663
Multiple cross-site scripting XSS vulnerabilities in oauthcallback.php on Accellion Kiteworks appliances before kw2016.03.00 allow remote attackers to inject arbitrary web script or HTML via the 1 code, 2 error, or 3 errordescription parameter...