Illumina Local Run Manager TLS Protocol Data Compromise

The vulnerability of the TLS protocol implementation in the Illumina Local Run Manager lies in the transmission of data in an open manner. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of protected information, including login credentials...

Illumina Local Run Manager Auth Bypass

The vulnerability of the Illumina Local Run Manager software lies in the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to remotely infiltrate, replicate, modify, and/or intercept sensitive data...

Illumina Local Run Manager Code Execution

The vulnerability of the Illumina Local Run Manager software is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, modify settings, configurations, software, or gain access to confidential data of the affected product...

PT-2022-3910

Name of the Vulnerable Software and Affected Versions Illumina Local Run Manager affected versions not specified Description The issue is related to the lack of restrictions on file uploads. A malicious actor can upload any file type, including executable code, allowing for a remote code exploit...

PT-2022-3859

Name of the Vulnerable Software and Affected Versions Illumina Local Run Manager affected versions not specified Description The issue is related to a directory traversal vulnerability. This vulnerability can allow a malicious actor to upload outside the intended directory structure, potentially...

PT-2022-4354

Name of the Vulnerable Software and Affected Versions Illumina Local Run Manager versions 2.4 and lower Description The issue is related to the lack of TLS encryption in the implementation of protocols, allowing a malicious actor to perform a man-in-the-middle MITM attack on sensitive data...

Illumina Local Run Manager 代码注入漏洞

Illumina Local Run Manager is an integrated solution from Illumina, Inc. Illumina Local Run Manager is vulnerable to code injection, which could be exploited by attackers to remotely upload and execute code at the operating system level...