Lucene search
+L

10 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 6:19 a.m.•11 views

SUSE CVE-2005-0131

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

5CVSS7AI score0.01797EPSS
SaveExploits0References3
OSV
OSV
•added 2021/03/04 6:15 p.m.•18 views

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

4.3CVSS5.8AI score0.01036EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/04 6:15 p.m.•45 views

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

7.1CVSS0.01036EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/03/04 6:15 p.m.•8 views

CVE-2021-22128

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

7.1CVSS5.9AI score0.01036EPSS
SaveExploits0References2
CVE
CVE
•added 2021/03/04 5:27 p.m.•86 views

CVE-2021-22128

The CVE-2021-22128 entry applies to FortiProxy SSL VPN portal, affecting versions 2.0.0 and 1.2.9 and below. The flaw is described as an improper access control that could let an authenticated, remote attacker access internal services, such as the ZebOS Shell, via the Quick Connection functionali...

7.1CVSS4.6AI score0.01036EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/03/04 12:00 a.m.•5 views

PT-2021-14858

Name of the Vulnerable Software and Affected Versions FortiProxy SSL VPN portal versions 1.2.9 and below, version 2.0.0 Description The issue is related to improper access control, which may allow an authenticated, remote attacker to access internal services, such as the ZebOS Shell, through the...

7.1CVSS0.01036EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/04 12:00 a.m.•5 views

CVE-2021-22128: Undefined Security Weakness

An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality...

7.1CVSS5.9AI score0.01036EPSS
SaveExploits0References1
Fortinet
Fortinet
•added 2021/03/02 12:00 a.m.•70 views

FortiProxy SSL-VPN Improper Access Control vulnerability through the Quick connection functionality

...

4CVSS5.3AI score0.01036EPSS
SaveExploits0Affected Software1
CVE
CVE
•added 2005/01/22 5:00 a.m.•67 views

CVE-2005-0131

The CVE-2005-0131 entry concerns Konversation 0.15. The Quick Connection dialog erroneously uses the user’s password as the nickname when connecting to an IRC server, which can leak the password to other users. This is tied to the Konversation IRC client and stems from the login handling in the Q...

5CVSS6.3AI score0.01797EPSS
SaveExploits0References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/01/22 12:00 a.m.•4 views

CVE-2005-0131: Undefined Security Weakness

The Quick Connection dialog in Konversation 0.15 inadvertently uses the user-provided password as the nickname instead of the user-provided nickname when connecting to the IRC server, which could leak the password to other users...

5CVSS5.7AI score0.01797EPSS
SaveExploits0References1
Rows per page
Query Builder