CVE-2014-3521
- EPSS 0.15%
- Veröffentlicht 06.10.2014 14:55:09
- Zuletzt bearbeitet 12.04.2025 10:46:40
The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access restrictions via a crafted URL.
- EPSS 0.25%
- Veröffentlicht 06.10.2014 14:55:07
- Zuletzt bearbeitet 12.04.2025 10:46:40
Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase, (2) cluster, (3) storage, (4) portal_skins/custom, or (5) logs Luci extension.
CVE-2013-7347
- EPSS 0.14%
- Veröffentlicht 31.03.2014 14:58:45
- Zuletzt bearbeitet 12.04.2025 10:46:40
Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-201...
CVE-2012-3359
- EPSS 0.14%
- Veröffentlicht 31.03.2014 14:58:43
- Zuletzt bearbeitet 12.04.2025 10:46:40
Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability t...
CVE-2011-0720
- EPSS 1.41%
- Veröffentlicht 03.02.2011 17:00:03
- Zuletzt bearbeitet 11.04.2025 00:51:21
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
- EPSS 1.19%
- Veröffentlicht 14.11.2007 00:46:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly sending data or attempting connections.