Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP 15.84, 16.15, 17.2 Clear all filters
TI-2024-06731 CVE-2024-7266 · GHSA-5wvf-7fq8-m4w6

Users listing in EZD RP

Priority LOW 31

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to list all users in the system, including those from other organizations.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00313 Published 2024-08-07 Fixed in 15.84, 16.15 +1 CWE-863
TI-2024-06730 CVE-2024-7265 · GHSA-jvvm-gq28-8rgc

Privilege Escalation in EZD RP

Priority MEDIUM 40

Incorrect User Management vulnerability in Naukowa i Akademicka Sieć Komputerowa - Państwowy Instytut Badawczy EZD RP allows logged-in user to change the password of any user, including root user, which could lead to pri…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00492 Published 2024-08-07 Fixed in 15.84, 16.15 +1 CWE-863