CVE Vulnerabilities

CVE-2017-10815

Improper Authentication

Published: Aug 04, 2017 | Modified: Aug 15, 2017
CVSS 3.x
8.1
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

MaLion for Windows 5.2.1 and earlier (only when Remote Control is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when Remote Control is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Terminal Agent.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Malion Intercom * 5.2.1 (including)

Potential Mitigations

References