Vulnerabilities

TI-2018-07144 CVE-2018-10079 · GHSA-2h3j-wfg4-fwg5

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console…

LOW 35

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00762 Published 2018-04-20 No fix listed CWE-269

TI-2018-07143 CVE-2018-10078 · GHSA-x53j-g9xq-59rp

Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote…

LOW 26

Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.02016 Published 2018-04-20 No fix listed CWE-79

TI-2018-07142 CVE-2018-10077 · GHSA-2q8v-8987-rxr5

XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote…

LOW 33

XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0808 Published 2018-04-20 No fix listed CWE-611

Vulnerabilities

Filters

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console…

Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote…

XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote…