Secureauth vulnerabilities
2 vulnerabilities
Known vulnerabilities in Secureauth products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Impacket1 vulnerabilities
- Secureauth Identity Provider1 vulnerabilities
PrioritiseCVE-2021-31800fedoraproject · fedora +6 morefedoraproject fedoraMultiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.CVSS9.8CriticalEPSS19.41%RoutineCVE-2020-9437secureauth · secureauth_identity_providersecureauth secureauth_identity_providerSecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.CVSS4.8MediumEPSS0.98%