| Package | Affected versions | Patched versions |
|---|---|---|
| dominaplus | ≥ 1.10.11, ≤ 1.10.77 |
AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful authentication bypass attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free