CVE-2022-29908

The CVE-2022-29908 case involves Fabasoft Cloud Enterprise Client 22.4.0043, where the folioupdate service enables Local Privilege Escalation. The available sources in the connected set state the vulnerability arises from the folioupdate component, enabling an attacker with local access and low p...

CVE-2022-29908: Improper Certificate Validation

The folioupdate service in Fabasoft Cloud Enterprise Client 22.4.0043 allows Local Privilege Escalation...

Fabasoft Cloud Enterprise Client 信任管理问题漏洞

Fabasoft Cloud Enterprise Client is a cloud enterprise client from Fabasoft Austria. It is used to edit documents directly through a web browser. A security vulnerability exists in Fabasoft Cloud Enterprise Client version 22.4.0043, which stems from the folioupdate service allowing local privileg...

Fabasoft Cloud Website Cross Site Scripting

Bulletin was redacted based on a request by the author...

CVE-2014-7560

The Fabasoft Cloud aka com.fabasoft.android.cmis.foliocloud application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Fabasoft Cloud aka com.fabasoft.android.cmis.foliocloud application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7560

CVE-2014-7560 affects the Fabasoft Cloud Android client (package com.fabasoft.android.cmis.folio_cloud), version 3.0.1. The vulnerability arises because the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and disclose sensitive inform...

CVE-2014-7560

The Fabasoft Cloud aka com.fabasoft.android.cmis.foliocloud application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7560: Undefined Security Weakness

The Fabasoft Cloud aka com.fabasoft.android.cmis.foliocloud application 3.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8092

Name of the Vulnerable Software and Affected Versions Fabasoft Cloud aka com.fabasoft.android.cmis.folio cloud version 3.0.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.5...