CVE-2016-5807

Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request...

CVE-2016-5797

Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts...

Authentication flaw

Tollgrade LightHouse SMS before 5.1 patch 3 allows remote attackers to bypass authentication and restart the software via unspecified vectors...

Authentication flaw

Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request...

CVE-2016-5790

Tollgrade LightHouse SMS before 5.1 patch 3 allows remote attackers to bypass authentication and restart the software via unspecified vectors...

CVE-2016-5807

CVE-2016-5807 affects Tollgrade LightHouse SMS Software prior to version 5.1 Patch 3. The vulnerability, described as Missing Authentication for Critical Function and Forced Browsing, allows remote authenticated attackers to bypass the administrative-authentication requirement and read or modify ...

CVE-2016-5797

CVE-2016-5797 affects Tollgrade LightHouse SMS Software prior to Version 5.1 Patch 3. The issue is information exposure through error messages that reveal whether a username exists, enabling remote account-name enumeration. Affected component is the web-based LightHouse SMS software; the root cau...

CVE-2016-5797: Exposure of Sensitive Information to an Unauthorized Actor

Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of attempts...

CVE-2016-5790: Undefined Security Weakness

Tollgrade LightHouse SMS before 5.1 patch 3 allows remote attackers to bypass authentication and restart the software via unspecified vectors...

CVE-2016-5807: Improper Access Control

Tollgrade LightHouse SMS before 5.1 patch 3 allows remote authenticated users to bypass an intended administrative-authentication requirement, and read or change parameter values, via a direct request...

PT-2016-6691

Name of the Vulnerable Software and Affected Versions Tollgrade LightHouse SMS versions prior to 5.1 patch 3 Description The issue allows remote authenticated users to bypass an intended administrative-authentication requirement. This enables them to read or change parameter values by making a...

PT-2016-6685

Name of the Vulnerable Software and Affected Versions Tollgrade LightHouse SMS versions prior to 5.1 patch 3 Description The issue allows remote attackers to enumerate account names via a series of authentication attempts, due to different error messages being provided for failed authentication...

PT-2016-6681

Name of the Vulnerable Software and Affected Versions Tollgrade LightHouse SMS versions prior to 5.1 patch 3 Description The issue allows remote attackers to bypass authentication and restart the software. Recommendations For versions prior to 5.1 patch 3, update to version 5.1 patch 3 or later t...