uninett

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

uninett records in CISA KEV

No uninett vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mod Auth Mellon 6 records MEDIUM Radsecproxy 3 records MEDIUM

Records

3 records in Radsecproxy · all components

TI-2021-12310 CVE-2021-32642

Missing input validation in dynamic discovery example scripts.

MEDIUM 43

radsecproxy is a generic RADIUS proxy that supports both UDP and TLS (RadSec) RADIUS transports.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01342 Published 2021-05-28 Fixed in 1.9.0 CWE-20

TI-2012-03863 CVE-2012-4523 · GHSA-67pw-2qx3-43v6

radsecproxy before 1.6.1 does not properly verify certificates when there are…

LOW 32

radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, which might allow remote…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01763 Published 2012-11-20 No fix listed CWE-264

TI-2012-03906 CVE-2012-4566 · GHSA-3qgg-3fwc-j9gv

The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when…

LOW 31

The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used for verifying the certificate chain, whic…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01499 Published 2012-11-20 No fix listed CWE-264

Open these records in search →

Critical	2
High	3
Medium	6
Low	0
No CVSS	0