CVE-2019-18356

Description

References

• thycotic.force.com/support/s/article/SS-RN-EXT-Secret-Server-10-7-000000-Legacy-Release-Notes · Release Notes

More vulnerabilities in secret server

• CVE-2021-41845MEDIUM 6.5A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions are 10.9.000032 throug…
• CVE-2019-18357MEDIUM 6.1An XSS issue was discovered in Thycotic Secret Server before 10.7 (issue 2 of 2).
• CVE-2019-18355CRITICAL 9.8An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.
• CVE-2014-4861CRITICAL 9.8The Remote Desktop Launcher in Thycotic Secret Server before 8.6.000010 does not properly cleanup a temporary file that contains an encrypte…
• CVE-2017-11725MEDIUM 5.4The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections.