Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Denyall Component: Web Application Firewall Clear all filters
TI-2017-10773 CVE-2017-14706 · GHSA-xg92-4q2x-2943

DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication…

Priority HIGH 65

DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.28243 Published 2017-09-22 No fix listed CWE-287