EUVD-2020-27988

Malware in sbrugna...

EUVD-2020-27987

Malware in sbrugna...

CVE-2020-6845

An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack...

CVE-2020-6844

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...

CVE-2020-6844

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...

CVE-2020-6844

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...

Cross site request forgery (csrf)

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...

CVE-2020-6845

TopManage OLK 2020 is affected by a DOM-based XSS issue caused by not setting ReadOnly on the session cookie, enabling takeover of user and admin accounts. Multiple sources (NVD, Red Hat, CNVD, etc.) corroborate the vulnerability in TopManage OLK 2020. The provided documents describe the root cau...

CVE-2020-6844

Summary: CVE-2020-6844 concerns TopManage OLK 2020 with a/login CSRF vulnerability that can be chained with another vulnerability to takeover admin and user accounts. The combined effect is the potential takeover of accounts due to cross-site request forgery weaknesses in the login flow. What is ...

CVE-2020-6844: Cross-Site Request Forgery (CSRF)

In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts...

CVE-2020-6845: Improper Neutralization of Input During Web Page Generation

An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack...