Liftoffsoftware

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Liftoffsoftware records in CISA KEV

No Liftoffsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gateone 2 records MEDIUM Gate One 1 record LOW

Records

3 records

TI-2020-18193 CVE-2020-35736 · GHSA-hh59-28c3-fqc2

GateOne 1.1 allows arbitrary file download without authentication via /downloads/..

MEDIUM 49

GateOne 1.1 allows arbitrary file download without authentication via /downloads/..

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15402 Published 2020-12-27 No fix listed CWE-22

TI-2020-13780 CVE-2020-20184 · GHSA-j3w6-mx9r-j6qp

GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in…

MEDIUM 47

GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02684 Published 2020-12-14 No fix listed CWE-78

TI-2020-13511 CVE-2020-19003 · GHSA-q6j2-g8qf-wvf7

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by…

LOW 25

An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00789 Published 2021-10-06 No fix listed CWE-290

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0