Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy Component: Ezd Rp Clear all filters
TI-2024-06732 CVE-2024-7267 · GHSA-cq2c-35gp-j9qc

Internal infrastructure data leak in EZD RP

Priority LOW 32

Exposure of Sensitive Information vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to retrieve information about IP infrastructure and credentials.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00595 Published 2024-08-07 Fixed in 19.6 CWE-213
TI-2024-06731 CVE-2024-7266 · GHSA-5wvf-7fq8-m4w6

Users listing in EZD RP

Priority LOW 31

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00313 Published 2024-08-07 Fixed in 15.84, 16.15 +1 CWE-863
TI-2024-06730 CVE-2024-7265 · GHSA-jvvm-gq28-8rgc

Privilege Escalation in EZD RP

Priority MEDIUM 40

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to pri…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00492 Published 2024-08-07 Fixed in 15.84, 16.15 +1 CWE-863