CVE-2017-20109 Teleopti WFM Administration GetOneTenant Credentials information disclosure

A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant of the component Administration. The manipulation leads to information disclosure Credentials. The attac...

CVE-2017-20109

CVE-2017-20109 affects Teleopti WFM up to version 7.1.0. The issue concerns an unknown functionality in the file /TeleoptiWFM/Administration/GetOneTenant (Administration component) which, when manipulated, discloses credentials. The vulnerability can be exploited remotely and has public exploit d...

Insecure Password Hashing

fh-wfm-user currently uses SHA-1 to hash passwords. This is an insecure algorithm and was deprecated by the National Institute of Standards and Technology NIST in 2011...

Teleopti WFM Detection

Detection of Teleopti WFM The script sends a HTTP connection request to the server and attempts to detect the presence of Teleopti WFM and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

Teleopti WFM <= 7.1.0 Multiple Vulnerabilities

Teleopti WFM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:teleopit:wfm"; if description...

Teleopti WFM 7.1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications Advisory Title: Teleopti WFM Multiple Vulnerabilities Date: 2/4/2017 Researcher: Graph-X email: graphx sigaint org Vendor Homepage: http://www.teleopti.com Version: = 7.1.0 CVE: is dead Disclosure Timeline 8/30/2016 - Initial contact made to...

Teleopti WFM 7.1.0 Information Disclosure / Access Controls

Advisory Title: Teleopti WFM Multiple Vulnerabilities Date: 2/4/2017 Researcher: Graph-X email: [email protected] Vendor Homepage: http://www.teleopti.com Version: = 7.1.0 CVE: is dead Disclosure Timeline 8/30/2016 Initial contact made to alert Teleopti of the flaws 9/2/2016 Vulnerabilities...

Buttercup WFM Title Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Buttercup WFM - Title Cross-Site Scripting

Buttercup WFM - Title Cross-Site Scripting source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Buttercup WFM - 'Title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24269/info Buttercup WFM Web File Manager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...