Vulnerabilities

TI-2013-01434 CVE-2013-1631 · GHSA-grcj-hw69-j2m9

Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action

LOW 27

Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01315 Published 2020-01-30 No fix listed CWE-200

TI-2013-01188 CVE-2013-1352 · GHSA-gcwr-r3hv-m73v

LOW 35

Verax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01307 Published 2020-01-30 No fix listed CWE-798

TI-2013-01187 CVE-2013-1351 · GHSA-5rvf-w662-g5p8

LOW 30

Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02008 Published 2020-01-30 No fix listed CWE-294

TI-2013-01186 CVE-2013-1350 · GHSA-78qw-wh98-5mv5

MEDIUM 42

Verax NMS prior to 2.1.0 has multiple security bypass vulnerabilities

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01514 Published 2020-01-30 No fix listed CWE-863