Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Panorama Project Component: Nhiservisignadapter Clear all filters
TI-2020-15837 CVE-2020-25846 · GHSA-6553-8h6r-vxxh

CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2

Priority LOW 35

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00974 Published 2020-12-31 No fix listed CWE-601
TI-2020-15836 CVE-2020-25845 · GHSA-7555-8m6j-6q57

CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -1

Priority LOW 35

Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00974 Published 2020-12-31 No fix listed CWE-601