Versa

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints.

The Versa Director GUI provides an option to customize the look and feel of the user interface.

The Versa Concerto SD-WAN orchestration platform is vulnerable to an authentication bypass in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints.

The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service.

The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data.

The Versa Director software exposes a number of services by default and allow attackers an easy foothold due to default credentials and multiple accounts (most with sudo access) that utilize the same default credentials.

In Versa Director, the command injection is an attack in which the goal is execution of arbitrary commands on the host operating system via a vulnerable application.

In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary read, write, or execution of newly created f…

The Versa Concerto SD-WAN orchestration platform is vulnerable to an privileges escalation and container escape vulnerability caused by unsafe default mounting of host binary paths that allow the container to modify host…

The Versa Director SD-WAN orchestration platform provides direct web-based access to uCPE virtual machines through the Director GUI.

In VOS user session identifier (authentication token) is issued to the browser prior to authentication but is not changed after the user successfully logs into the application.

Versa SASE Client for Windows versions released between 7.8.7 and 7.9.4 contain a local privilege escalation vulnerability in the audit log export functionality.

The Versa Director SD-WAN orchestration platform implements Two-Factor Authentication (2FA) using One-Time Passcodes (OTP) delivered via email or SMS.

The Versa Director SD-WAN orchestration platform includes a Webhook feature for sending notifications to external HTTP endpoints.

The Versa Director SD-WAN orchestration platform provides an option to upload various types of files.

In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the server.

The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box.

The Versa Director offers REST APIs for orchestration and management.

The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files.

The Versa Director SD-WAN orchestration platform allows customization of the user interface, including the header, footer, and logo.

A XSS vulnerability exists in Versa Director Release: 16.1R2 Build: S8.

In VOS compromised, an attacker at network endpoints can possibly view communications between an unsuspecting user and the service using man-in-the-middle attacks.

In Versa Director, the un-authentication request found.

In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage.

In Versa Director, the unencrypted backup files stored on the Versa deployment contain credentials stored within configuration files.