NCP Engineering Secure Enterprise Client Security Vulnerability

Ncp Engineering NCP engineering Secure Enterprise Client is a VPN Virtual Private Network client application from the German company Ncp Engineering. A security vulnerability exists in NCP engineering Secure Enterprise Client versions prior to 12.22, which stems from the presence of insecure file...

CVE-2023-28869

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link...

CVE-2023-28868

Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link...

CVE-2023-28868

The vulnerability CVE-2023-28868 affects NCP Secure Enterprise Client, specifically the Support Assistant component, and exists in versions prior to 12.22. The root cause is a flaw in the Support Assistant that enables an attacker to delete arbitrary files on the operating system by abusing symbo...

CVE-2023-28871

The CVE-2023-28871 issue affects the Support Assistant component of NCP Secure Enterprise Client (versions prior to 12.22). The root cause is a vulnerability in the Support Assistant that allows an attacker to read OS registry information by abusing symbolic links. Impact is limited to reading re...

NCP Secure Enterprise Client Security Vulnerability

NCP Secure Enterprise Client is a VPN Virtual Private Network client application from NCP Germany. A security vulnerability exists in NCP Secure Enterprise Client versions prior to 12.22, which stems from a vulnerability that allows an attacker to read the contents of arbitrary files on the...

NCP Secure Enterprise Client Security Vulnerability

NCP Secure Enterprise Client is a VPN Virtual Private Network client application from NCP Germany. A security vulnerability exists in NCP Secure Enterprise Client versions prior to 12.22 that originates from a vulnerability that allows an attacker to delete arbitrary files on the operating system...

CVE-2023-28869

The CVE affects NCP Secure Enterprise Client, specifically versions prior to 12.22, where the Support Assistant feature can be abused to read arbitrary files by creating a symbolic link. The underlying issue is tied to the Support Assistant component in the client, enabling an attacker with netwo...

NCP Secure Enterprise Client Security Vulnerability

NCP Secure Enterprise Client is a VPN Virtual Private Network client application from NCP Germany. A security vulnerability exists in NCP Secure Enterprise Client versions prior to 12.22, which stems from a vulnerability that allows an attacker to read operating system registry information by...

CVE-2023-28870

CVE-2023-28870 affects the NCP Secure Enterprise Client (Support Assistant) prior to version 12.22. The vulnerability stems from insecure file permissions that allow low-privileged users to write to configuration files, enabling potential manipulation of client configuration. Exploitation details...

PT-2023-22017 · Ncp · Ncp Secure Enterprise Client

Name of the Vulnerable Software and Affected Versions: NCP Secure Enterprise Client versions prior to 12.22 Description: The issue allows attackers to delete arbitrary files on the operating system by creating a symbolic link. This is possible due to a flaw in the Support Assistant component of t...

PT-2023-22021 · Ncp · Ncp Secure Enterprise Client

Name of the Vulnerable Software and Affected Versions: NCP Secure Enterprise Client versions prior to 12.22 Description: The issue allows attackers to read registry information of the operating system by creating a symbolic link. This is possible due to a flaw in the Support Assistant component o...

PT-2023-22020 · Ncp · Ncp Secure Enterprise Client

Name of the Vulnerable Software and Affected Versions: NCP Secure Enterprise Client versions prior to 12.22 Description: The issue is related to insecure file permissions in the Support Assistant component of the NCP Secure Enterprise Client. This allows attackers to write to configuration files...

Code injection

Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator...

CVE-2023-32764

CVE-2023-32764 affects Fabasoft Cloud Enterprise Client 23.3.0.130, with a vulnerability that allows a user to escalate privileges to local administrator. Multiple connected sources corroborate this specific product/version and the local-privilege-escalation impact. The available documents do not...

Fabasoft Cloud Enterprise Client Security Vulnerability

Fabasoft Cloud Enterprise Client is a cloud enterprise client from Fabasoft Austria. It is used to edit documents directly from a web browser. A security vulnerability exists in Fabasoft Cloud Enterprise Client version 23.3.0.130, which originates from allowing a user to escalate privileges to...

CVE-2022-29908

The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation...

CVE-2022-29908

The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation...

CVE-2022-29908

The CVE-2022-29908 case involves Fabasoft Cloud Enterprise Client 22.4.0043, where the folioupdate service enables Local Privilege Escalation. The available sources in the connected set state the vulnerability arises from the folioupdate component, enabling an attacker with local access and low p...

PT-2022-19907 · Fabasoft · Fabasoft Cloud Enterprise Client

Name of the Vulnerable Software and Affected Versions: Fabasoft Cloud Enterprise Client version 22.4.0043 Description: The issue concerns the folioupdate service, which allows Local Privilege Escalation. Recommendations: For Fabasoft Cloud Enterprise Client version 22.4.0043, at the moment, there...