Vulnerabilities

TI-2022-13326 CVE-2022-31322 · GHSA-6x2g-9wvj-4q72

Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate…

LOW 34

Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00326 Published 2022-09-13 No fix listed CWE-798

TI-2022-13327 CVE-2022-31324 · GHSA-gw88-98xg-7785

An arbitrary file download vulnerability in the downloadAction() function of Penta…

LOW 29

An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00485 Published 2022-09-13 No fix listed CWE-494

TI-2022-15989 CVE-2022-35413 · GHSA-rwxr-7mfr-m8cg

WAPPLES through 6.0 has a hardcoded systemi account.

MEDIUM 60

WAPPLES through 6.0 has a hardcoded systemi account.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19106 Published 2022-09-13 No fix listed CWE-798

TI-2022-16080 CVE-2022-35582 · GHSA-5v2p-2vjm-j3w4

Penta Security Systems Inc WAPPLES 4.0., 5.0.0., 5.0.12.* are vulnerable to Incorrect…

MEDIUM 40

Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00915 Published 2022-09-13 No fix listed CWE-798

Vulnerabilities

Filters

Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate…

An arbitrary file download vulnerability in the downloadAction() function of Penta…

WAPPLES through 6.0 has a hardcoded systemi account.

Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect…

Penta Security Systems Inc WAPPLES 4.0., 5.0.0., 5.0.12.* are vulnerable to Incorrect…