CVE-2018-16495

Versa Networks Versa Operating System (VOS) is affected by a session fixation issue: an authentication token is issued to the browser before authentication and is not changed after a successful login. The underlying problem: the same session ID persists across login, enabling an attacker to set u...

CVE-2018-16494

CVE-2018-16494 affects Versa Networks Versa OS (VOS). The issue is an overly permissive default file-creation mask (umask) that allows authorized server users to obtain unauthorized access via insecure file permissions. This can lead to arbitrary read, write, or execution of newly created files a...