Design/Logic Flaw

AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read the BSD, Linux, MacOS and Solaris private keys, private keys' passwords, and root passwords stored in the credential manager. Every administrator can read the ESX and Windows passwords stored in the credential manager...

CVE-2019-14482

AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcoded SSL private key is used across different customers' installations when no other SSL certificate is installed, which allows remote attackers to defeat cryptographic protection...

CVE-2019-14482

AdRem NetCrunch 10.6.0.4587 is affected by a hardcoded SSL private key vulnerability in the NetCrunch web client. The same hardcoded key is used across different customer installations when no other SSL certificate is installed, allowing remote attackers to defeat cryptographic protections by lev...

CVE-2019-14483

AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read the BSD, Linux, MacOS and Solaris private keys, private keys' passwords, and root passwords stored in the credential manager. Every administrator can read the ESX and Windows passwords stored in the credential manager...

CVE-2019-14483

The CVE-2019-14483 entry concerns AdRem NetCrunch 10.6.0.4587, where the credential manager stores private keys and passwords (BSD/Linux/MacOS/Solaris keys, private keys and root passwords) readable by any user, and ESX/Windows passwords readable by any administrator. This is a credentials-disclo...

CVE-2019-14480

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges...

CVE-2019-14480

CVE-2019-14480 affects AdRem NetCrunch 10.6.0.4587 via the NetCrunch web client, described as an Improper Session Handling vulnerability that can lead to authentication bypass or privilege escalation. The connected Red Hat and NVD entries corroborate the issue and provide CVSS metrics (2.0/7.5; 3...

CVE-2019-14477

AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted...

CVE-2019-14477

CVE-2019-14477 affects AdRem NetCrunch 10.6.0.4587. The issue is improper credential storage: the internal user database is readable by low-privileged users and passwords are weakly encoded or encrypted. No exploitation details are provided in the connected documents.

PT-2020-9557

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue allows a read-only administrator to execute arbitrary code on the server running the NetCrunch server software through the NetCrunch web client. Recommendations: For AdRem NetCrunch...

PT-2020-9555

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue is related to improper credential storage. The internal user database is readable by low-privileged users, and the passwords in the database are weakly encoded or encrypted...

PT-2020-9559

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability in the NetCrunch web client. Successful exploitation requires a logged-in user to open a malicious page, which can lead to account...

PT-2020-9556

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability in the NetCrunch web client. The user's input data is not properly encoded when being echoed back to the user, allowing a...

PT-2020-9561

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue allows credentials disclosure, enabling every user to read private keys, private keys' passwords, and root passwords for BSD, Linux, MacOS, and Solaris stored in the credential manage...

PT-2020-9558

Name of the Vulnerable Software and Affected Versions: AdRem NetCrunch version 10.6.0.4587 Description: The issue is related to improper session handling in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges. Recommendations: For AdRem NetCrunch versi...

AdRem NetCrunch Cross-Site Scripting Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. A cross-site scripting vulnerability exists in AdRem NetCrunch 10.6.0.4587...

AdRem NetCrunch Permission License and Access Control Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. A security vulnerability exists in AdRem NetCrunch 10.6.0.4587 that allows...

AdRem NetCrunch Trust Management Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. AdRem NetCrunch 10.6.0.4587 suffers from a Trust Management Issue...

Adrem Netcrunch Trust Management Issues Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. A trust management issue vulnerability exists in AdRem NetCrunch...

AdRem NetCrunch Information Disclosure Vulnerability

Adrem Netcrunch is a device monitoring software from the American company Adrem. The software monitors Windows, Linux, Mac OS X, BSD, NetWare, and SNMP devices based on SNMP sources, Windows event logs, and Syslog servers. An information disclosure vulnerability exists in AdRem NetCrunch...