Liftoffsoftware

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Liftoffsoftware records in CISA KEV

No Liftoffsoftware vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Gateone · all components

TI-2020-18193 CVE-2020-35736 · GHSA-hh59-28c3-fqc2

MEDIUM 49

GateOne 1.1 allows arbitrary file download without authentication via /downloads/..

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.15402 Published 2020-12-27 No fix listed CWE-22

TI-2020-13780 CVE-2020-20184 · GHSA-j3w6-mx9r-j6qp

MEDIUM 47

GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02684 Published 2020-12-14 No fix listed CWE-78