TI-2019-02915 CVE-2019-3909 · GHSA-999g-r275-5mjf
Premisys Identicard version 3.1.190 database uses default credentials.
Priority MEDIUM 46
Premisys Identicard version 3.1.190 database uses default credentials.
Vulnerabilities
5 records
TI-2019-02914 CVE-2019-3908 · GHSA-hrx7-7chr-4cvm
Hard-coded credentials in Premisys Identicard 3.1.190
Priority LOW 36
Premisys Identicard version 3.1.190 stores backup files as encrypted zip files.
TI-2019-02913 CVE-2019-3907 · GHSA-3mm6-hc5r-p5rx
Hard-coded credentials in Premisys Identicard 3.1.190
Priority LOW 34
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).
TI-2019-02912 CVE-2019-3906 · GHSA-5wqr-f6rg-xf95
Hard-coded credentials in Premisys Identicard 3.1.190
Priority MEDIUM 43
Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003.
TI-2017-10993 CVE-2017-14973 · GHSA-6vrj-jhh6-638v
IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to…
Priority LOW 25
IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) via the notes field in /~user_handler?file=logged_in.shtm (aka the edit user page).