CVE-2024-25660

The WebDAV service in Infinera TNMS (Transcend Network Management System) version 19.10.3 is vulnerable to unauthorized file operations. The root cause is incorrect privilege assignment , where the service executes with unnecessary privileges, allowing a low-privileged remote attacker to manipula...

CVE-2024-25659

In Infinera TNMS (Transcend Network Management System) version 19.10.3 , an insecure default configuration of the internal SFTP server on Linux servers allows a remote attacker to access files and directories outside the SFTP user home directory. This vulnerability results from improper limitatio...

CVE-2024-25658

Infinera Transcend Network Management System (TNMS) Server version 19.10.3 contains a vulnerability where passwords are stored in cleartext . This flaw allows attackers who gain access to the database or exported configuration files to retrieve SNMP users' usernames and passwords in cleartext. As...

CVE-2024-25661

In Infinera TNMS (Transcend Network Management System) version 19.10.3 , a security vulnerability exists in the TNMS Client desktop application. The root cause is the cleartext storage of sensitive information within the application's memory. This allows a guest operating system administrator to ...