CVE-2024-46894: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 3. The affected application does not properly validate authorization of a user to query the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of configured...

PT-2024-8720

Name of the Vulnerable Software and Affected Versions SINEC INS versions prior to V1.0 SP2 Update 3 Description The issue is related to an error in user authorization checking for the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of...

CVE-2009-3478

Argument injection vulnerability in 1 src/content/js/connection/sftp.js and 2 src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename...