Foxman Un Security Vulnerabilities

CVE-2024-28020

A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious usercould use the passwords and login information to extend access onthe server and other services.

CVE-2024-28021

A vulnerability exists in the FOXMAN-UN/UNEM server that affects the messagequeueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentialityand integrity.