Visualware MyConnection Server security vulnerabilities

Visualware MyConnection Server is a software application from Visualware, Inc. Providing accurate measurements of network quality and performance ensures a good user experience. A security vulnerability exists in Visualware MyConnection Server, which arises from a specific flaw in the doIForward...

Visualware MyConnection Server security vulnerabilities

Visualware MyConnection Server is a software application from Visualware, Inc. Providing accurate measurements of network quality and performance ensures a good user experience. A security vulnerability exists in Visualware MyConnection Server, which stems from a specific flaw in the...

Visualware MyConnection Server doPostUploadfiles Code Execution

The vulnerability of the doPostUploadfiles method in the software for testing and monitoring network quality of Visualware’s MyConnection Server is related to an incorrect limit on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitra...

Visualware MyConnection Server doRTAAccessCTConfig Bypass

The vulnerability of the doRTAAccessCTConfig method exists in the software used for testing and monitoring network quality by Visualware MyConnection Server. This vulnerability arises due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a...

Visualware MyConnection Server Unauthorized Access

The vulnerability of the doRTAAccessUPass method in the software for testing and monitoring network quality by Visualware MyConnection Server is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

PT-2023-4977 · Visualware · Visualware Myconnection Server

Name of the Vulnerable Software and Affected Versions: Visualware MyConnection Server affected versions not specified Description: This issue allows remote attackers to bypass authentication on affected installations of Visualware MyConnection Server. Minimal user interaction is required to explo...

Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Visualware MyConnection Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the doIForward method. Due to the improper restriction of XML...

Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Visualware MyConnection Server. Minimal user interaction is required to exploit this vulnerability. The specific flaw exists within the doRTAAccessCTConfig method. The issue results from the lack of...

Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Visualware MyConnection Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

Visualware MyConnection Server File Upload Vulnerability

Visualware MyConnection Server is a software application from Visualware, Inc. Providing accurate measurements of network quality and performance ensures a great user experience. A file upload vulnerability exists in Visualware MyConnection Server 11.0b build 5382 and prior versions, which...

CVE-2021-27198

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation run...

CVE-2021-27198

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation run...

CVE-2021-27198

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation run...

CVE-2021-27198

Visualware MyConnection Server is affected by an unauthenticated remote code execution vulnerability (CVE-2021-27198) present in versions prior to 11.1a. The issue arises via an arbitrary file upload in the web service through the myspeed/sf?filename= URI, enabling code execution on the server (W...

CVE-2021-27198

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation run...

PT-2021-17317 · Visualware · Visualware Myconnection Server

Name of the Vulnerable Software and Affected Versions: Visualware MyConnection Server versions prior to 11.1a Description: An issue was discovered in Visualware MyConnection Server that allows Unauthenticated Remote Code Execution via Arbitrary File Upload in the web service when using a...

Visualware MyConnection Server code-related vulnerabilities

Visualware MyConnection Server is a software application from Visualware, Inc. Providing accurate measurements of network quality and performance ensures a great user experience. A file upload vulnerability exists in Visualware MyConnection Server 11.0b build 5382 and prior versions, which...

CVE-2021-27198: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation run...

VisualWare MyConnection Server 11.x Remote Code Execution

Document Title: =============== VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability References Source: ==================== https://www.securifera.com/advisories/cve-2021-27198/ https://myconnectionserver.visualware.com/download.html Release Date: ============= 2020-02-25...

VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability

Document Title: =============== VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability References Source: ==================== https://www.securifera.com/advisories/cve-2021-27198/ https://myconnectionserver.visualware.com/download.html Release Date: ============= 2020-02-25...