Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Velneo Component: Vclient Clear all filters
TI-2021-20386 CVE-2021-45036 · GHSA-c83p-m9mw-q96q

Velneo vClient improper authentication

Priority MEDIUM 41

Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against the server.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00778 Published 2022-11-28 No fix listed CWE-290
TI-2021-20385 CVE-2021-45035 · GHSA-pv7f-h3w8-w3jh

Velneo vClient Improper authentication

Priority LOW 28

Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default.

CVSS 3.1MEDIUM 6.3 Adjacent network No auth User interaction EPSS 0.00464 Published 2022-09-23 No fix listed CWE-287