Vulnerabilities

TI-2022-15579 CVE-2022-34772 · GHSA-c38h-5gmx-rf6h

Tabit - password enumeration

LOW 39

Tabit - password enumeration.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00539 Published 2022-08-22 No fix listed CWE-521

TI-2022-15583 CVE-2022-34776 · GHSA-2fq8-qg89-5r59

LOW 33

Tabit - giftcard stealth.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00526 Published 2022-08-22 No fix listed CWE-200

TI-2022-15582 CVE-2022-34775 · GHSA-cqvg-fwrm-3xxf

LOW 33

Tabit - Excessive data exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00471 Published 2022-08-22 No fix listed CWE-639

TI-2022-15581 CVE-2022-34774 · GHSA-8wr9-j43r-pc9h

LOW 28

Tabit - Arbitrary account modification.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00462 Published 2022-08-22 No fix listed

TI-2022-15580 CVE-2022-34773 · GHSA-jggc-89vw-pwfr

MEDIUM 43

Tabit - HTTP Method manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00585 Published 2022-08-22 No fix listed CWE-74

TI-2022-15577 CVE-2022-34770 · GHSA-rvrp-jg7g-6r79

LOW 33

Tabit - sensitive information disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2022-08-22 No fix listed CWE-639

TI-2022-15578 CVE-2022-34771 · GHSA-gxfw-27c3-xr84

LOW 25

Tabit - arbitrary SMS send on Tabits behalf.

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.00437 Published 2022-08-22 No fix listed