← All credits
This issue was found by Stefano Libero of Nozomi Networks Product Security team during a scheduled internal VAPT testing session.
7 vulnerability records and advisories credit this contributor.
CVE-2024-4465
Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0
CVE-2023-23903
DoS via SAML configuration in Guardian/CMC before 22.6.2
CVE-2023-24015
Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2
CVE-2023-22843
Stored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.2
CVE-2023-23574
Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2
CVE-2023-22378
Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2
CVE-2023-24471
Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2