Lucene search
K

7 matches found

NVD
NVD
added 2021/08/11 9:15 p.m.5 views

CVE-2020-25564

In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials of a non-privileged user by directly accessing RemoteMgmtTaskSave Automation Tasks feature...

8.8CVSS0.0031EPSS
Exploits1References2
Prion
Prion
added 2021/08/11 9:15 p.m.16 views

Design/Logic Flaw

In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave Automation Tasks feature and not having a JSESSIONID...

7.5CVSS9.1AI score0.00377EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2021/08/11 8:22 p.m.43 views

CVE-2020-25564

CVE-2020-25564 : A privilege escalation in SapphireIMS 5.0 allows a non-privileged user to create a local administrator on any client by directly accessing the RemoteMgmtTaskSave (Automation Tasks) feature. The root cause is insufficient access control in the Automation Tasks pathway. Impact repo...

8.8CVSS8.4AI score0.0031EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/08/11 8:21 p.m.12 views

CVE-2020-25563

In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring any credentials by directly accessing RemoteMgmtTaskSave Automation Tasks feature and not having a JSESSIONID...

9.2AI score0.00377EPSS
Exploits1References2
CVE
CVE
added 2021/08/11 8:21 p.m.50 views

CVE-2020-25563

SapphireIMS 5.0 is affected by an authentication-bypass vulnerability in the RemoteMgmtTaskSave (Automation Tasks) path that allows an unauthenticated user to create a local administrator on any client by accessing RemoteMgmtTaskSave without a JSESSIONID. Root cause: direct access to an automatio...

9.8CVSS9.1AI score0.00377EPSS
Exploits1References2Affected Software1
seebug.org
seebug.org
added 2014/03/21 12:0 a.m.50 views

Siemens SIMATIC S7-1200多个漏洞

CVE ID: CVE-2014-2249,CVE-2014-2250,CVE-2014-2252,CVE-2014-2254,CVE-2014-2256,CVE-2014-2258 SIMATIC S7-1200是可编程控制器,可实现简单却高度精确的自动化任务。 Siemens SIMATIC S7-1200 4.0.0之前版本在实现上存在多个漏洞,可被恶意利用执行跨站请求伪造、劫持用户会话、造成拒绝服务。 1、向TCP端口443发送特制的数据包造成的错误可造成设备进入defect模式。 2、随机生成器内弱熵相关错误,可导致劫持另外用户的会话。...

8.3CVSS6.4AI score0.02249EPSS
Exploits1
OpenVAS
OpenVAS
added 2009/02/17 12:0 a.m.25 views

Fedora Update for php-Smarty FEDORA-2008-9401

Check for the Version of php-Smarty OpenVAS Vulnerability Test Fedora Update for php-Smarty FEDORA-2008-9401 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

7.5CVSS7.5AI score0.01003EPSS
Exploits0References2
Rows per page
Query Builder