CVE-2017-14772: Exposure of Sensitive Information to an Unauthorized Actor

Skybox Manager Client Application is prone to information disclosure via a username enumeration attack. A local unauthenticated attacker could exploit the flaw to obtain valid usernames, by analyzing error messages upon valid and invalid account login attempts...

CVE-2017-14771: Improper Input Validation

Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary fi...

CVE-2017-14773: Undefined Security Weakness

Skybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges vulnerability during authentication of a valid user in a debugger-pause state. The vulnerability can only be exploited by a local authenticated attacker...

CVE-2017-14770: Exposure of Sensitive Information to an Unauthorized Actor

Skybox Manager Client Application prior to 8.5.501 is prone to an information disclosure vulnerability of user password hashes. A local authenticated attacker can access the password hashes in a debugger-pause state during the authentication process...

PT-2017-13684

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application versions prior to 8.5.501 Description The issue is related to insufficient input validation of user-supplied file paths when uploading files via the application. This can be exploited by a local authenticated...

PT-2017-13683

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application versions prior to 8.5.501 Description The issue allows a local authenticated attacker to access user password hashes in a debugger-pause state during the authentication process, potentially leading to...

PT-2017-13685

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application affected versions not specified Description The issue allows for information disclosure through a username enumeration attack. A local unauthenticated attacker could exploit this to obtain valid usernames by...

PT-2017-13686

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application versions prior to 8.5.501 Description The issue is related to an elevation of privileges during the authentication of a valid user in a debugger-pause state. This can only be exploited by a local authenticated...