Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Gonicus Component: Gosa Clear all filters
TI-2019-08370 CVE-2019-11187 · GHSA-9f66-x3qx-v4cg

Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an…

Priority MEDIUM 46

Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-insensitive substring "success" when an arbitrary password is p…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01749 Published 2019-08-15 No fix listed CWE-287
TI-2018-15927 CVE-2018-1000528 · GHSA-fh4v-6j27-m5mf

GONICUS GOsa version before commit 56070d6 contains a…

Priority MEDIUM 57

GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.46118 Published 2018-06-26 No fix listed CWE-79