5 matches found
CVE-2018-19233
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
PT-2018-14884
Name of the Vulnerable Software and Affected Versions COMPAREX Miss Marple Enterprise Edition versions prior to 2.0 Description The issue allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file. Recommendatio...
CVE-2018-19233: Use of Hard-coded Credentials
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file...
CVE-2018-19234: Download of Code Without Integrity Check
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation...
PT-2018-14885
Name of the Vulnerable Software and Affected Versions COMPAREX Miss Marple Enterprise Edition versions prior to 2.0 Description The issue allows remote attackers to execute arbitrary code with SYSTEM privileges due to missing update validation in the Miss Marple Updater Service. Recommendations F...