Vulnerabilities

TI-2019-08078 CVE-2019-10847 · GHSA-q3gx-7gwv-xv6q

Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.

MEDIUM 43

Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0242 Published 2019-05-24 No fix listed CWE-352

TI-2019-08079 CVE-2019-10848 · GHSA-484m-c8g4-232f

Computrols CBAS 18.0.0 allows Username Enumeration.

LOW 35

Computrols CBAS 18.0.0 allows Username Enumeration.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.08489 Published 2019-05-24 No fix listed CWE-203

TI-2019-08077 CVE-2019-10846 · GHSA-vc8g-53j3-cqx4

Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting…

LOW 35

Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04662 Published 2019-05-23 No fix listed CWE-79

TI-2019-08080 CVE-2019-10849 · GHSA-gx56-w6x8-7fjx

Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.

MEDIUM 44

Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.09012 Published 2019-05-23 No fix listed CWE-862

TI-2019-08081 CVE-2019-10850 · GHSA-7m72-36wh-c4fr

Computrols CBAS 18.0.0 has Default Credentials.

MEDIUM 46

Computrols CBAS 18.0.0 has Default Credentials.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01949 Published 2019-05-23 No fix listed CWE-798

TI-2019-08082 CVE-2019-10851 · GHSA-c5h2-6jqx-ph3c

Computrols CBAS 18.0.0 has hard-coded encryption keys.

LOW 30

Computrols CBAS 18.0.0 has hard-coded encryption keys.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00654 Published 2019-05-23 No fix listed CWE-798

TI-2019-08083 CVE-2019-10852 · GHSA-9xvr-vmq9-hmhp

Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter…

MEDIUM 42

Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01752 Published 2019-05-23 No fix listed CWE-89

TI-2019-08084 CVE-2019-10853 · GHSA-8w9p-f5fm-r48v

Computrols CBAS 18.0.0 allows Authentication Bypass.

LOW 39

Computrols CBAS 18.0.0 allows Authentication Bypass.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0166 Published 2019-05-23 No fix listed

TI-2019-08085 CVE-2019-10854 · GHSA-63vq-6399-h95w

Computrols CBAS 18.0.0 allows Authenticated Command Injection.

MEDIUM 44

Computrols CBAS 18.0.0 allows Authenticated Command Injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02991 Published 2019-05-23 No fix listed CWE-77

TI-2019-08086 CVE-2019-10855 · GHSA-9wr8-p2g4-v8fw

Computrols CBAS 18.0.0 mishandles password hashes.

LOW 35

Computrols CBAS 18.0.0 mishandles password hashes.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00998 Published 2019-05-23 No fix listed CWE-326

Vulnerabilities

Filters