EUVD-2015-7808

Malware in sbrugna...

CVE-2015-7910: Exposure of Sensitive Information to an Unauthorized Actor

Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to bypass intended access restrictions by disregarding this header and processing the response body...

PT-2015-7666

Name of the Vulnerable Software and Affected Versions Exemys Telemetry Web Server affected versions not specified Description The issue allows remote attackers to bypass intended access restrictions. This is possible because the Exemys Telemetry Web Server relies on an HTTP Location header to...

Exemys Web Server Bypass Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified a login bypass in the Exemys Telemetry Web Server. Exemys has not produced a patch to mitigate this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS The following Exemys product is affected: Exemys Telemetry...