CVE-2018-19753

CVE-2018-19753 affects Tarantella Enterprise versions prior to 3.11. The vulnerability is a Local File Inclusion/Directory Traversal in Tarantella Enterprise

CVE-2018-19754

CVE-2018-19754 - Tarantella Enterprise prior to 3.11 contains an access-control bypass vulnerability. The issue allows an attacker to gain access to another user’s account by modifying a parameter in a login request, effectively bypassing authentication via the Web management/login flow. Document...