PT-2022-15186

Name of the Vulnerable Software and Affected Versions HYPR Server versions 6.10 through 6.15.1 Description The issue allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. Recommendations For HYPR Server versions 6.10 through...

CVE-2022-1984: Deserialization of Untrusted Data

This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access WFA before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload...