Vulnerabilities

TI-2023-00837 CVE-2023-0882 · GHSA-5mv2-w7gr-rp48

Authorization Bypass Through User-Controlled Key on Single Connect

MEDIUM 41

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00712 Published 2023-02-17 No fix listed CWE-639

TI-2021-20279 CVE-2021-44795 · GHSA-w72r-mx5p-g4q9

Modifying User Permissions via Unauthorized Access in Single Connect

LOW 35

Single Connect does not perform an authorization check when using the "sc-assigned-credential-ui" module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00918 Published 2022-01-27 Fixed in 2.16 CWE-862

TI-2021-20278 CVE-2021-44794 · GHSA-6p9r-qwhr-gc82

Information Leakege via Unauthorized Access in Single Connect

LOW 26

Single Connect does not perform an authorization check when using the "sc-diagnostic-ui" module.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00993 Published 2022-01-27 Fixed in 2.16 CWE-862

TI-2021-20277 CVE-2021-44793 · GHSA-xp77-g88w-h7mg

Information Leakege via Unauthorized Access in Single Connect

MEDIUM 40

Single Connect does not perform an authorization check when using the sc-reports-ui" module.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01187 Published 2022-01-27 Fixed in 2.16 CWE-862

TI-2021-20276 CVE-2021-44792 · GHSA-fq38-v44x-849g

Information Leakege via Unauthorized Access in Single Connect

LOW 26

Single Connect does not perform an authorization check when using the "log-monitor" module.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00993 Published 2022-01-27 Fixed in 2.16 CWE-862

Vulnerabilities

Filters

Authorization Bypass Through User-Controlled Key on Single Connect

Modifying User Permissions via Unauthorized Access in Single Connect

Information Leakege via Unauthorized Access in Single Connect

Information Leakege via Unauthorized Access in Single Connect

Information Leakege via Unauthorized Access in Single Connect