security@fidelissecurity.com
organization01
Rollen
Rollen dieser Identität.
02
Referenzen
Weitere Namen und Kennungen dieser Entität.
nvdUS security@fidelissecurity.com
03
bewertete Schwachstellen (13)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-24394US | high8.8 | — | ||
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “update_checkfile” value for the “filename” p… | ||||
| CVE-2022-24393US | high8.8 | — | ||
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “check_vertica_upgrade” value for the “cpIp”… | ||||
| CVE-2022-24392US | high8.8 | — | ||
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feed_comm_test” value for the “feed” paramet… | ||||
| CVE-2022-24391US | high8.8 | — | ||
Vulnerability in Fidelis Network and Deception CommandPost enables SQL injection through the web interface by an attacker with user level access. The vulnerability is present in Fi… | ||||
| CVE-2022-24390US | high8.8 | — | ||
Vulnerability in rconfig “remote_text_file” enables an attacker with user level access to the CLI to inject user level commands into Fidelis Network and Deception CommandPost, Coll… | ||||
| CVE-2022-24389US | high8.8 | — | ||
Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector,… | ||||
| CVE-2022-24388US | high8.8 | — | ||
Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network and Deception CommandPost, Collector, Senso… | ||||
| CVE-2022-0997US | high7.8OT erhöht | Exploit | ||
Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to… | ||||
| CVE-2022-0486US | high7.8OT erhöht | Exploit | ||
Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to th… | ||||
| CVE-2021-35050US | high7.5 | — | ||
User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could… | ||||
| CVE-2021-35049US | high8.8 | — | ||
Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface. The vulnerability could allow a specially crafted HTTP… | ||||
| CVE-2021-35048US | critical9.8 | — | ||
Vulnerability in Fidelis Network and Deception CommandPost enables unauthenticated SQL injection through the web interface. The vulnerability could lead to exposure of authenticati… | ||||
| CVE-2021-35047US | high8.8 | — | ||
Vulnerability in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with user level access to the CLI to inject root level comma… | ||||