48 matches found
packetfence
PacketFence PacketFence 是什么？ PacketFence 是一个完全受支持、值得信赖的免费开源网络访问控制（NAC）系统。其功能集令人印象深刻，包括用于注册和修复的强制门户、集中式有线和无线管理、802.1X 支持、问题设备的二层隔离、与 IDS 解决方案和漏洞扫描器的集成；PacketFence 可用于有效保护网络——从小型网络到非常大的异构网络。 你想知道谁在你的网络上吗？你想基于连接者给予不同的网络访问权限吗？PacketFence 正是你所需要的！ 安装 请遵循管理指南中提供的说明。 更多信息 自上次发布以来的显著变化请参见 NEWS 文件。...
packetfence-CVE-2024-39024
关于 安全研究员：ly1g3, ly1g3attuta.io GPG 指纹：https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 概述：远程代码执行 - 从低权限认证用户到管理员 RCE CVE：CVE-2024-3924 时间线： 发现 - ly1g3 报告 - ly1g3 修复 - packetfence 参考：https://www.packetfence.com/news/2024/packetfence-14-0-released/ Packetfence...
EUVD-2024-55713
In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...
CVE-2024-39024
In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...
CVE-2024-39024
In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...
CVE-2024-39024
CVE-2024-39024 affects PacketFence 13.2.0. The issue is an authenticated remote code execution via the WebGui interface setting, enabling a low-privilege attacker with network access to trigger a compromise. The CVSS v3.1 vector indicates high impact across confidentiality, integrity, and availab...
EUVD-2012-4666
Malware in sbrugna...
EUVD-2011-4020
Malware in sbrugna...
EUVD-2012-4665
Malware in sbrugna...
EUVD-2011-4021
Malware in sbrugna...
EUVD-2012-4667
Malware in sbrugna...
CVE-2012-4742
The webnoderegister function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors...
SOGo and PacketFence Impacted by SAML Implementation Vulnerabilities
Part of Akamai's incident management process for vulnerabilities in third party software involves verifying potential impact in other systems using the same or similar libraries. While following that process when addressing the SAML impersonation vulnerability, CVE-2021-28091, which impacted...
SAML Implementation Vulnerability Impacting Some Akamai Services
This blog post provides an overview of a vulnerability discovered in Akamai's Enterprise Application Access EAA product which has been patched. This vulnerability could have allowed an actor to impersonate an authorized user when interacting with an application that used Security Assertion Markup...
SOGo and PacketFence Impacted by SAML Implementation Vulnerabilities
Part of Akamai's incident management process for vulnerabilities in third party software involves verifying potential impact in other systems using the same or similar libraries...
Akamai + Fingerbank: How an open source community can transform security
Isn't it amazing how seemingly simple decisions can have far-reaching effects? When the Inverse team in Montreal took over PacketFence in 2008, it was an open source OS solution. They recognized the inherent value in keeping it as such. In so doing, they didn't just launch a product--they created...
Open Source Network Access Control: PacketFence
PacketFence is a fully supported, trusted, Free and Open Source network access control NAC system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2 isolation of problematic devices,...
PacketFence Injection Vulnerability
PacketFence is an open source network access control solution. A security vulnerability exists in the html/admin/login.php file in versions prior to PacketFence 3.0.2. A remote attacker can exploit this vulnerability with a specially crafted username to perform an LDAP injection attack and bypass...
PacketFence Bypass Authentication Vulnerability
PacketFence is an open source network access control solution. A security vulnerability exists in the 'checkpassword' function in the html/admin/login.php file in versions prior to PacketFence 3.0.2. A remote attacker can exploit this vulnerability to bypass authentication with the help of an emp...
