Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Aethon Clear all filters
TI-2022-10509 CVE-2022-27494 · GHSA-p4x7-px78-gghm

CROSS-SITE SCRIPTING CWE-79

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00652 Published 2022-10-21 Fixed in 24 CWE-79
TI-2022-00966 CVE-2022-1070 · GHSA-583f-56ww-9ppj

CHANNEL ACCESSIBLE BY NON-ENDPOINT CWE-300

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00749 Published 2022-10-21 Fixed in 24 CWE-200
TI-2022-00956 CVE-2022-1059 · GHSA-4ppw-fh8f-gwjp

CROSS-SITE SCRIPTING CWE-79

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00657 Published 2022-10-21 Fixed in 24 CWE-79
TI-2022-09772 CVE-2022-26423 · GHSA-c7xv-h5wg-6fq8

MISSING AUTHORIZATION CWE-862

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.008 Published 2022-10-21 Fixed in 24 CWE-200
TI-2022-00962 CVE-2022-1066 · GHSA-p6xg-jwp4-9fj2

MISSING AUTHORIZATION CWE-862

Priority MEDIUM 43

Aethon TUG Home Base Server versions prior to version 24 are affected by un unauthenticated attacker who can freely access hashed user credentials.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00754 Published 2022-10-21 Fixed in 24 CWE-284