RSS   Podatności dla 'GOSA'   RSS

2019-08-15
 
CVE-2019-11187

CWE-284
 
 
Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-insensitive substring "success" when an arbitrary password is provided.

 
2018-06-26
 
CVE-2018-1000528

CWE-79
 
 
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open a specially crafted web page. This vulnerability appears to have been fixed in after commit 56070d6289d47ba3f5918885954dcceb75606001.

 

 >>> Vendor: Gonicus 2 Produkty
Gonicus system administration
GOSA

Copyright 2025, cxsecurity.com

 

Back to Top