Insecure Cryptographic Algorithm

Ylianst MeshCentral is vulnerable to the use of an Insecure Cryptographic Algorithm. The vulnerability is due to the usage of the HMAC-MD5 algorithm, which allows an attacker to brute force the encrypted content...

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm...

GHSA-V269-RRR6-CX6R Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm...

CVE-2023-51838

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm...

MeshCentral Security Vulnerability

MeshCentral is a complete web-based remote monitoring and management site for the MeshCentral community. A security vulnerability exists in MeshCentral version 1.1.16 that stems from an issue with the use of a corrupted or risky encryption algorithm...

CVE-2023-51838

CVE-2023-51838 affects MeshCentral 1.1.16. The issue arises from Use of a Broken or Risky Cryptographic Algorithm; Veracode notes HMAC-MD5 usage. CVSS v3.1 base score 7.5 (HIGH) with Confidentiality impact HIGH. No explicit remediation or patch details are provided in the supplied documents; expl...

CVE-2023-51838

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm...

CVE-2023-51838

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm...

CVE-2023-51838

Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm...

Improper Certificate Validation

meshcentral is vulnerable to Improper Certificate Validation. The vulnerability is due to the disabling of certificate verification in HTTPS connections by setting rejectUnauthorized to false, and utilizing outdated and insecure TLS versions known for security weaknesses; also use of algorithms...

Weak TLS Encryption

MeshCentral is vulnerable to TLS Downgrade Attack. The vulnerability is due to the usage of TLS that includes known vulnerabilities. An attacker can possibly eavesdrop on communication as result of this vulnerability...

GHSA-8XW6-9H78-C89J Ylianst MeshCentral Missing SSL Certificate Validation

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...

Ylianst MeshCentral Missing SSL Certificate Validation

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...

CVE-2023-51837

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...

Input validation

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...

CVE-2023-51837

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...

Ylianst MeshCentral Security Vulnerability

MeshCentral is a complete web-based remote monitoring and management site for the MeshCentral community. A security vulnerability exists in MeshCentral version 1.1.16 that stems from a missing SSL certificate validation...

CVE-2023-51837

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...

CVE-2023-51837

Ylianst MeshCentral 1.1.16 is vulnerable to Missing SSL Certificate Validation...

PT-2024-14309 · Ylianst · Ylianst Meshcentral

Name of the Vulnerable Software and Affected Versions: Ylianst MeshCentral version 1.1.16 Description: The issue concerns missing SSL certificate validation. Recommendations: For Ylianst MeshCentral version 1.1.16, consider implementing proper SSL certificate validation to mitigate the risk of...