Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Logonbox Subscribe
Filtered by product Nervepoint Access Manager
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-6716 1 Logonbox 1 Nervepoint Access Manager 2020-08-24 7.5 HIGH 9.4 CRITICAL
An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs (backup and synchronization jobs), which could allow for the possibility of a Denial of Service attack via a modified jobId parameter in a runJob.html GET request.