CVE-2022-22229 Paragon Active Assurance (Formerly Netrounds): Stored Cross-site Scripting (XSS) vulnerability in web administration

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability, a stored XSS or persistent, in the Control Center Controller web pages of Juniper Networks Paragon Active Assurance Formerly Netrounds allows a high-privilege attacker with 'WRITE' permissions to...

Juniper Networks Paragon Active Assurance 跨站脚本漏洞

Juniper Networks Paragon Active Assurance is a programmable test and service assurance solution from Juniper Networks, Inc. Using software-based and traffic-generating test proxies, it can be easily used and delivered as a SaaS solution from the cloud or deployed locally in NFV environments. A...

PT-2022-5303 · Juniper Networks · Juniper Networks Paragon Active Assurance

Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance Formerly Netrounds versions prior to 3.1.1 Juniper Networks Paragon Active Assurance Formerly Netrounds version 3.2 prior to 3.2.1 Description: The issue is related to an Improper Neutralization of...

paragon.edu.au Cross Site Scripting vulnerability OBB-2835563

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-22190

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the...

CVE-2022-22190

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the...

Improper access control

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the...

CVE-2022-22190 Paragon Active Assurance Control Center: Information disclosure vulnerability in crafted URL

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the...

CVE-2022-22190

CVE-2022-22190 describes an information-disclosure vulnerability in Juniper Networks Paragon Active Assurance Control Center v3.1.0. An unauthenticated attacker can craft a URL to generate PDF reports that may reveal sensitive configuration data, by exploiting a feature that shares account data v...

PT-2022-15288 · Juniper Networks · Juniper Networks Paragon Active Assurance

Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance version 3.1.0 Description: An issue in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially...

Juniper Networks Paragon 访问控制错误漏洞

Juniper Networks Paragon is a software application from Juniper, USA. A real-time network topology view. An access control error vulnerability exists in Juniper Networks Paragon Active Assurance Control Center version 3.1.0, which stems from the presence of an incorrect access control...

CVE-2022-22190

An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports, potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the...

Paragon Initiative Enterprises: Recaptcha Secret key Leaked

Greeting from @kashifinfo90, I hope Paragonie Security Team is doing great, Following Secret Keys are leaked: "secret-key": "6Ldy5BYTAAAAAPBh868BMm2nGZelOUyXJHTUE4no", "site-key": "6Ldy5BYTAAAAACk3Tj8wDUBLcVxSL2JXFBw-Dtj3" "secret-key": "6Ld27iETAAAAAF6tsd5SaoCgc5cFX-tkfHqx7FtX", "site-key":...

Paragon: Yet Another Cyberweapons Arms Manufacturer

Forbes has the story: Paragons product will also likely get spyware critics and surveillance experts alike rubbernecking: It claims to give police the power to remotely break into encrypted instant messaging communications, whether thats WhatsApp, Signal, Facebook Messenger or Gmail, the industry...

CVE-2021-0232

An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...

CVE-2021-0232

An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...

Authentication flaw

An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue...

CVE-2021-0232

The CVE-2021-0232 affecting Juniper Networks Paragon Active Assurance Control Center is an authentication bypass vulnerability. An attacker with deployment-specific information could mimic an already registered Test Agent and access its configuration and related inventory details, potentially lea...

PT-2021-12945 · Juniper Networks · Paragon Active Assurance Control Center

Name of the Vulnerable Software and Affected Versions: Juniper Networks Paragon Active Assurance Control Center versions prior to 2.35.6 Juniper Networks Paragon Active Assurance Control Center version 2.36 versions prior to 2.36.2 Description: An authentication bypass issue may allow an attacker...

Juniper Networks Paragon 访问控制错误漏洞

Juniper Networks Paragon is a software application from Juniper, USA. A real-time network topology view. An Access Control Error vulnerability exists in Paragon Active Assurance Control Center version 2.36, which allows remote attackers to bypass the authentication process. The following products...