EUVD-2014-2384

Malware in sbrugna...

miSecureMessages 4.0.1 - Session Management & Authentication Bypass Vulnerabilities

No description provided by source...

CVE-2014-2347

Amtelco miSecureMessages aka MSM 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request...

Design/Logic Flaw

Amtelco miSecureMessages aka MSM 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request...

CVE-2014-2347 AMTELCO miSecure Information Exposure

Amtelco miSecureMessages aka MSM 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request...

CVE-2014-2347

Amtelco miSecureMessages (MSM) Version 6.2 is affected by insufficient session management that can let remote authenticated users retrieve sensitive message contents via a modified message request. The vulnerability exposes PIIs and is exploitable remotely; publicly available exploits are noted i...

PT-2014-4640

Name of the Vulnerable Software and Affected Versions Amtelco miSecureMessages aka MSM version 6.2 Description The issue is related to improper session management, allowing remote authenticated users to obtain sensitive information by sending a modified message request. Recommendations For Amtelc...

CVE-2014-2347: Exposure of Sensitive Information to an Unauthorized Actor

Amtelco miSecureMessages aka MSM 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request...

miSecureMessages 4.0.1 - Session Management & Authentication Bypass Vulnerabilities

Exploit for php platform in category web applications Affected Product ================================== miSecureMessages from Amtelco - Tested on version: Client=4.0.1 Server=6.2.4552.30017 iOS: https://itunes.apple.com/us/app/misecuremessages/id423957478?mt=8 android:...

miSecureMessages 4.0.1 - Session Management Authentication Bypass

miSecureMessages 4.0.1 - Session Management Authentication Bypass Affected Product ================================== miSecureMessages from Amtelco - Tested on version: Client=4.0.1 Server=6.2.4552.30017 iOS: https://itunes.apple.com/us/app/misecuremessages/id423957478?mt=8 android:...

Amtelco miSecureMessages未授权访问漏洞

Bugtraq ID:66795 CVE ID:CVE-2014-0357 Amtelco miSecureMessages是一个可用于多个移动设备上的对消息进行加密的应用。 Amtelco miSecureMessages对用户消息访问缺少正确的验证，攻击者可在XML请求中提供contactID和合法许可证键值，就可以访问任意用户消息。 0 Amtelco miSecureMessages 目前没有详细解决方案： https://misecuremessages.com/...

Amtelco miSecureMessages未授权访问漏洞

Bugtraq ID:66795 CVE ID:CVE-2014-0357 Amtelco miSecureMessages是一个可用于多个移动设备上的对消息进行加密的应用。 Amtelco miSecureMessages对用户消息访问缺少正确的验证，攻击者可在XML请求中提供contactID和合法许可证键值，就可以访问任意用户消息。 0 Amtelco miSecureMessages 目前没有详细解决方案： https://misecuremessages.com/...

CVE-2014-0357

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

CVE-2014-0357

Amtelco miSecureMessages (Server Release 6.2) suffers an authentication/authorization weakness that allows remote attackers to read arbitrary user messages by sending an XML request containing a valid license key and a modified contactID value. The root cause is insufficient authentication/sessio...

PT-2014-3586

Name of the Vulnerable Software and Affected Versions Amtelco miSecureMessages affected versions not specified Description The issue allows remote attackers to read the messages of arbitrary users by sending an XML request with a valid license key and a modified contactID value. This can be done...

CVE-2014-0357: Improper Authentication

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application...

AMTELCO miSecureMessages Server insecurely authenticates clients

Overview AMTELCO miSecureMessages Server Release 6.2 performs weak authentication for access to user messages CWE-287. Description AMTELCO miSecureMessages Server Release 6.2 performs weak authentication for access to user messages. miSecureMessages authenticates client app XML requests for...