EUVD-2013-6609

Malware in sbrugna...

EUVD-2013-6607

Malware in sbrugna...

EUVD-2013-6795

Malware in sbrugna...

CVE-2013-6807

The client in OpenText Exceed OnDemand EoD 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses...

CVE-2013-6994

OpenText Exceed OnDemand EoD 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network...

CVE-2013-6805

OpenText Exceed OnDemand EoD 8 uses weak encryption for passwords, which makes it easier for 1 remote attackers to discover credentials by sniffing the network or 2 local users to discover credentials by reading a .eod8 file...

Design/Logic Flaw

OpenText Exceed OnDemand EoD 8 uses weak encryption for passwords, which makes it easier for 1 remote attackers to discover credentials by sniffing the network or 2 local users to discover credentials by reading a .eod8 file...

Design/Logic Flaw

The client in OpenText Exceed OnDemand EoD 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses...

CVE-2013-6807

The client in OpenText Exceed OnDemand EoD 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses...

CVE-2013-6805

OpenText Exceed OnDemand EoD 8 uses weak encryption for passwords, which makes it easier for 1 remote attackers to discover credentials by sniffing the network or 2 local users to discover credentials by reading a .eod8 file...

CVE-2013-6806

OpenText Exceed OnDemand EoD 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext...

PT-2014-3205

Name of the Vulnerable Software and Affected Versions OpenText Exceed OnDemand EoD version 8 Description The issue allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response. This triggers a downgrade to simple...

PT-2014-3244

Name of the Vulnerable Software and Affected Versions OpenText Exceed OnDemand EoD version 8 Description The issue allows remote attackers to perform session fixation attacks by sniffing the network, as the session ID is transmitted in cleartext. Recommendations For version 8, consider implementi...

CVE-2013-6805: Undefined Security Weakness

OpenText Exceed OnDemand EoD 8 uses weak encryption for passwords, which makes it easier for 1 remote attackers to discover credentials by sniffing the network or 2 local users to discover credentials by reading a .eod8 file...

CVE-2013-6994: Undefined Security Weakness

OpenText Exceed OnDemand EoD 8 transmits the session ID in cleartext, which allows remote attackers to perform session fixation attacks by sniffing the network...

PT-2014-3206

Name of the Vulnerable Software and Affected Versions OpenText Exceed OnDemand EoD version 8 Description The issue allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses, due to the client supportin...

PT-2014-3204

Name of the Vulnerable Software and Affected Versions OpenText Exceed OnDemand EoD version 8 Description The issue concerns the use of weak encryption for passwords, making it easier for remote attackers to discover credentials by sniffing the network or for local users to discover credentials by...

CVE-2013-6806: Improper Authentication

OpenText Exceed OnDemand EoD 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downgrade to simple authentication that sends credentials in plaintext...

CVE-2013-6807: Undefined Security Weakness

The client in OpenText Exceed OnDemand EoD 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obtain sensitive information via crafted responses...