CVE-2019-15085

Description

References

• adas-sso.com/es/extra/download.php · Product
• security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas · Third Party Advisory

Weitere Schwachstellen in adas

• CVE-2019-15089HOCH 8.8An issue was discovered in PRiSE adAS 1.7.0. Forms have no CSRF protection, letting an attacker execute actions as the administrator.
• CVE-2019-15088KRITISCH 9.8An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, i…
• CVE-2019-15087HOCH 7.2An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading t…
• CVE-2019-15086MITTEL 6.1An issue was discovered in PRiSE adAS 1.7.0. The newentityID parameter is not properly escaped, leading to a reflected XSS in the error mess…
• CVE-2019-14916MITTEL 6.5An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload.