Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat conga vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2007-4136
The ricci daemon in Red Hat Conga 0.10.0 allows remote malicious users to cause a denial of service (loss of new connections) by repeatedly sending data or attempting connections.
Redhat Conga 0.10.0
3.7
CVSSv2
CVE-2013-7347
Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow malicious users to gain access to the session by reading the __ac session cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2012-3359 for the base64-enc...
Redhat Enterprise Linux 5Redhat Conga
3.7
CVSSv2
CVE-2012-3359
Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows malicious users to gain privileges by accessing this cookie. NOTE: this issue has been SPLIT due to different vulnerability types. Use CVE-2013-7...
Redhat CongaRedhat Enterprise Linux 5
6.4
CVSSv2
CVE-2010-3852
The default configuration of Luci 0.22.4 and previous versions in Red Hat Conga uses "[INSERT SECRET HERE]" as its secret key for cookies, which makes it easier for remote malicious users to bypass repoze.who authentication via a forged ticket cookie.
Redhat Luci
7.5
CVSSv2
CVE-2011-0720
Unspecified vulnerability in Plone 2.5 up to and including 4.0, as used in Conga, luci, and possibly other products, allows remote malicious users to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.
Plone Plone 3.0.2Plone Plone 3.0.1Plone Plone 3.1.1Plone Plone 3.1.6Plone Plone 3.3.1Plone Plone 3.0.4Plone Plone 2.5.1Plone Plone 3.3.5Plone Plone 3.0.6Plone Plone 3.1.3Plone Plone 3.2Plone Plone 3.1.5.1Plone Plone 3.3.3Plone Plone 3.0Plone Plone 2.5Plone Plone 4.0Plone Plone 3.0.3Plone Plone 2.5.4Plone Plone 3.0.5Plone Plone 3.1Plone Plone 3.2.2Plone Plone 3.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654CVE-2023-49606encryptionNULL pointer dereferenceCVE-2024-4439CVE-2024-4649race conditionCVE-2024-27202CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook