Marvell

Qconvergeconslole Gui

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.5

CVE-2020-5804

Exploit
  • EPSS 0.89%
  • Published 08.01.2021 16:15:15
  • Last modified 21.11.2024 05:34:37

Marvell QConvergeConsole GUI <= 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An au...

9

CVE-2020-5805

Exploit
  • EPSS 0.2%
  • Published 08.01.2021 16:15:15
  • Last modified 21.11.2024 05:34:37

In Marvell QConvergeConsole GUI <= 5.5.0.74, credentials are stored in cleartext in tomcat-users.xml. OS-level users on the QCC host who are not authorized to use QCC may use the plaintext credentials to login to QCC.