Vulnerabilities

TI-2023-03642 CVE-2023-3897 · GHSA-mvf6-w562-53x9

Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page

LOW 30

Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03064 Published 2023-07-25 No fix listed CWE-203

TI-2018-11156 CVE-2018-15659 · GHSA-4ff3-qjv5-5x6w

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access…

LOW 32

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight applications.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01433 Published 2019-02-05 No fix listed CWE-200

TI-2018-11155 CVE-2018-15658 · GHSA-645m-2pcv-99m7

An issue was discovered in 42Gears SureMDM before 2018-11-27.

LOW 36

An issue was discovered in 42Gears SureMDM before 2018-11-27.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01777 Published 2019-02-05 No fix listed CWE-200

TI-2018-11154 CVE-2018-15657 · GHSA-j963-vc5v-49cp

An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.

LOW 35

An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.01562 Published 2019-02-05 No fix listed CWE-918

TI-2018-11153 CVE-2018-15656 · GHSA-fvfr-96g6-xp99

An issue was discovered in the registration API endpoint in 42Gears SureMDM before…

LOW 36

An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01553 Published 2019-02-05 No fix listed CWE-200

TI-2018-11152 CVE-2018-15655 · GHSA-2q77-h8cx-pwj5

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings.

LOW 32

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01433 Published 2019-02-05 No fix listed CWE-200

Vulnerabilities

Filters

Bypassing CAPTCHA & Enumerating Usernames via Password Reset Page

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access…

An issue was discovered in 42Gears SureMDM before 2018-11-27.

An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.

An issue was discovered in the registration API endpoint in 42Gears SureMDM before…

An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings.