Amtelco

Misecuremessages

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 3.5%
  • Published 06.05.2014 10:44:06
  • Last modified 02.10.2025 23:15:30

Amtelco miSecureMessages (aka MSM) 6.2 does not properly manage sessions, which allows remote authenticated users to obtain sensitive information via a modified message request.

  • EPSS 1.02%
  • Published 15.04.2014 10:55:12
  • Last modified 12.04.2025 10:46:40

Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request from the iOS or Android application.