Vulnerabilities

TI-2023-05975 CVE-2023-6519 · GHSA-p4rq-vwgg-386f

Seeing admin password hash value in Mia Technology's Mia-Med

LOW 39

Exposure of Data Element to Wrong Session vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00502 Published 2024-02-08 Fixed in 1.0.7 CWE-488

TI-2023-05974 CVE-2023-6518 · GHSA-rm4j-xw99-x97h

LOW 39

Plaintext Storage of a Password vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2024-02-08 Fixed in 1.0.7 CWE-256

TI-2023-05973 CVE-2023-6517 · GHSA-wfhx-9fx9-r5gm

LOW 39

Exposure of Sensitive Information Due to Incompatible Policies vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00473 Published 2024-02-08 Fixed in 1.0.7 CWE-213

TI-2023-05971 CVE-2023-6515 · GHSA-pmqc-v2g6-qw5w

MEDIUM 41

Authorization Bypass Through User-Controlled Key vulnerability in Mia Technology Inc.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00566 Published 2024-02-08 Fixed in 1.0.7 CWE-639

TI-2022-03451 CVE-2022-3760 · GHSA-8525-g6v6-vc84

MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mia Technology Mia-Med.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-03-07 Fixed in 1.0.0.58 CWE-89