OverIT Geocall Log Management Directory Traversal Vulnerability

OverIT Geocall is a field service management solution from OverIT Italy. A path traversal vulnerability exists in version 6.3 prior to OverIT Geocall build 2:346977, which arises from a failure of a networked system or product to properly filter for specific elements in the path of a resource or...

OverIT Geocall Access Control Error Vulnerability

OverIT Geocall is a field service management solution from OverIT Italy. An Access Control Error vulnerability exists in version 6.3 prior to OverIT Geocall build 2:346977, which arises from a network system or product that does not properly restrict access to resources from unauthorized roles. A...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

Design/Logic Flaw

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5888

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5891

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application...

Code injection

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user, and login to the web application...

Directory traversal

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

CVE-2019-5889

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5888

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5889

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5891

The CVE-2019-5891 issue affects OverIT Geocall 6.3 prior to build 2:346977. An unauthenticated servlet allows an attacker to obtain a cookie of an authenticated user and log into the web application, compromising session integrity and potentially exposing user data. The vulnerability arises in th...

CVE-2019-5890

Affected software: OverIT Geocall 6.3 (before build 2:346977). Vulnerability: Weak authentication and session management allow an authenticated user to access the Administrative control panel and execute administrative functions. Root cause (as described): Improper session handling enabling eleva...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

CVE-2019-5889

An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977...

CVE-2019-5889

CVE-2019-5889 concerns a log-management directory traversal vulnerability in OverIT Geocall, affecting version 6.3 prior to build 2:346977. The root cause is a failure to properly filter path elements in the log-management component, enabling access to locations outside of a restricted directory....

CVE-2019-5888

OverIT Geocall 6.3 is affected by multiple Cross‑Site Scripting (XSS) vulnerabilities in builds prior to 2:346977. The issue stems from insufficient validation of client‑side data in the WEB application, enabling potential execution of arbitrary script in the context of a user’s browser. Remediat...

CVE-2019-5888

Multiple XSS vulnerabilities were discovered in OverIT Geocall 6.3 before build 2:346977...

PT-2019-17847 · Overit · Overit Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall versions prior to 6.3 build 2:346977 Description: A directory traversal issue was discovered in the log-management component. Recommendations: For OverIT Geocall versions prior to 6.3 build 2:346977, update to a version that...