48 matches found
CVE-2022-21947
A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API steve to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V...
Drobo 5N2 Improper Access Control Vulnerability
Drobo 5N2 NAS is a networked storage appliance NAS from Drobo, USA. The device has features such as data sharing, data backup, remote access and disaster recovery.Dashboard API is one of the dashboard components. An improper access control vulnerability exists in the Dashboard API in Drobo 5N2 NA...
CVE-2018-14708
An insecure transport protocol used by Drobo Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to intercept network traffic...
CVE-2018-14709
Incorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to bypass authentication due to insecure token generation...
CVE-2018-14709
Incorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to bypass authentication due to insecure token generation...
Authentication flaw
Incorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to bypass authentication due to insecure token generation...
CVE-2018-14708
CVE-2018-14708 affects Drobo 5N2 NAS with Drobo Dashboard API (version 4.0.5-13.28.96115). The vulnerability arises from using an insecure transport protocol, enabling attackers to intercept network traffic to/from the API. Publicly cited entries (NVD/CNVD) confirm network-interception impact; CV...
