Vulnerabilities

TI-2013-03577 CVE-2013-4098 · GHSA-97qr-pjq6-5cg3

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject…

LOW 30

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04357 Published 2013-06-28 No fix listed CWE-20

TI-2013-03576 CVE-2013-4097 · GHSA-xxhr-wjq6-3g79

ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to…

LOW 33

ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in a -REG-E-OPEN error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07304 Published 2013-06-28 No fix listed CWE-22

TI-2013-03575 CVE-2013-4096 · GHSA-gg82-6rwc-5jqg

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote…

MEDIUM 50

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOST_NAME field.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.09099 Published 2013-06-28 No fix listed CWE-20

Vulnerabilities

Filters

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject…

ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to…

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote…