packetfence

PacketFence What is PacketFence? PacketFence is a fully supported, trusted, Free and Open Source network access control NAC system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2...

packetfence-CVE-2024-39024

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - Low level authenticated user to admin RCE CVE: CVE-2024-3924 Timeline: Discovered - ly1g3 Reported - ly1g3...

packetfence v15.2.0

PacketFence What is PacketFence? PacketFence is a fully supported, trusted, Free and Open Source network access control NAC system. Boasting an impressive feature set including a captive-portal for registration and remediation, centralized wired and wireless management, 802.1X support, layer-2...

PacketFence Cloud: Enterprise Network Access Control, Now a Managed Service

...

EUVD-2024-55713

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

CVE-2024-39024

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

CVE-2024-39024

In Packetfence 13.2.0 , an authenticated remote code execution (RCE) vulnerability exists within the WebGui interface setting. The root cause is located in Interface.pm at line 64 within the create function, where the $vlan_id variable—derived from user input—is only validated on the client side....

CVE-2024-39024

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

CVE-2024-39024

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

PT-2026-68628

Name of the Vulnerable Software and Affected Versions Packetfence version 13.2.0 Description The WebGui interface setting allows an authenticated user to perform remote code execution, which is the ability to execute arbitrary commands on the host machine. Recommendations At the moment, there is ...

CVE-2024-39024: Improper Neutralization of Input During Web Page Generation

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

EUVD-2012-4667

Malware in sbrugna...

EUVD-2011-4020

Malware in sbrugna...

EUVD-2011-4021

Malware in sbrugna...

EUVD-2012-4666

Malware in sbrugna...

EUVD-2012-4665

Malware in sbrugna...

CVE-2012-4742

The webnoderegister function in web.pm in PacketFence before 3.0.2 might allow remote attackers to execute arbitrary code via unspecified vectors...

SOGo and PacketFence Impacted by SAML Implementation Vulnerabilities

Part of Akamai's incident management process for vulnerabilities in third party software involves verifying potential impact in other systems using the same or similar libraries. While following that process when addressing the SAML impersonation vulnerability, CVE-2021-28091, which impacted...

SAML Implementation Vulnerability Impacting Some Akamai Services

This blog post provides an overview of a vulnerability discovered in Akamai's Enterprise Application Access EAA product which has been patched. This vulnerability could have allowed an actor to impersonate an authorized user when interacting with an application that used Security Assertion Markup...

SOGo and PacketFence Impacted by SAML Implementation Vulnerabilities

Part of Akamai's incident management process for vulnerabilities in third party software involves verifying potential impact in other systems using the same or similar libraries...