CVE-2018-15658: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in 42Gears SureMDM before 2018-11-27. By visiting the page found at /console/ConsolePage/Master.html, an attacker is able to see the markup that would be presented to an authenticated user. This is caused by the session validation occurring after the initial markup is...

PT-2019-9154

Name of the Vulnerable Software and Affected Versions 42Gears SureMDM versions prior to 2018-11-27 Description An issue was discovered that allows an attacker to see the markup presented to an authenticated user by visiting the "/console/ConsolePage/Master.html" API endpoint. This occurs because...