CVE-2021-40850

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx...

CVE-2021-40853

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...

Authorization

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...

Sql injection

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx...

Information disclosure

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...

Open redirect

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information...

CVE-2021-40853 TCMAN GIM missing authorization vulnerability

TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...

CVE-2021-40853

TCMAN GIM is described as lacking authorization checks when accessing certain resources, allowing remote attackers to reach URLs requiring privileges and potentially obtain sensitive information. Affected software: TCMAN GIM (mobile facility management software). Root cause: missing authorization...

CVE-2021-40852

TCMAN GIM is affected by an open redirect vulnerability. The issue allows an attacker to redirect user navigation to attacker-controlled pages, potentially enabling information disclosure. Connected sources confirm the flaw in TCMAN GIM’s handling of redirects, with CVE-2021-40852 documented acro...

CVE-2021-40851 TCMAN GIM SQL injection vulnerability

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...

CVE-2021-40852 TCMAN GIM open redirect vulnerability

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information...

CVE-2021-40851

CVE-2021-40851 concerns TCMAN GIM, where a lack of authorization affects all available webservice methods under /PC/WebService.asmx, potentially allowing a remote attacker to obtain information. This is described across NVD/CNVD records, indicating an information disclosure impact with network ac...

CVE-2021-40850 TCMAN GIM SQL injection vulnerability

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx...

CVE-2021-40850

CVE-2021-40850 affects TCMAN GIM. It describes a SQL injection vulnerability in multiple web service methods under /PC/WebService.asmx. The CVSS metrics indicate a critical impact (CVSS v3.1: 9.8, NETWORK, LOW complexity, NONE privileges) with high impact on confidentiality, integrity and availab...

CVE-2021-40852

TCMAN GIM is affected by an open redirect vulnerability. This vulnerability allows the redirection of user navigation to pages controlled by the attacker. The exploitation of this vulnerability might allow a remote attacker to obtain information...

CVE-2021-40850

TCMAN GIM is vulnerable to a SQL injection vulnerability inside several available webservice methods in /PC/WebService.asmx...

CVE-2021-40851

TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information...

PT-2021-22981

Name of the Vulnerable Software and Affected Versions TCMAN GIM affected versions not specified Description The issue concerns a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. This could allow a remote attacker to obtain information. Recommendations At th...

Tcman Gim SQL注入漏洞

Tcman Gim is a facility management software from Tcman Spain designed for use on mobile devices. TCMAN GIM suffers from a SQL injection vulnerability that can be exploited via the "/PC/WebService.asmx" page...

TCMAN GIM 安全漏洞

TCMAN Gim is facility management software designed for use on mobile devices.An authorization issue vulnerability exists in TCMAN GIM, which stems from a program's failure to perform authorization checks when attempting to access identified resources, which could be exploited by an attacker to...