Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Trapezegroup Subscribe
Filtered by product Transitmaster
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-14943 1 Trapezegroup 1 Transitmaster 2017-11-05 5.0 MEDIUM 7.5 HIGH
Trapeze TransitMaster is vulnerable to information disclosure (emails / hashed passwords) via a modified userID field in JSON data to ManageSubscriber.aspx/GetSubscriber. NOTE: this software is independently deployed at multiple municipal transit systems; it is not found exclusively on the "webwatch.(REDACTED).com" server mentioned in the reference.