vsecurity tandberg video communication server x4.1.0 vulnerabilities and exploits

(subscribe to this query)

The administrative web console on the TANDBERG Video Communication Server (VCS) before X4.3 uses predictable session cookies in (1) tandberg/web/lib/secure.php and (2) tandberg/web/user/lib/secure.php, which makes it easier for remote malicious users to bypass authentication, and...

Vsecurity Tandberg Video Communication Server X2.1.0 Vsecurity Tandberg Video Communication Server X1.0.0 Vsecurity Tandberg Video Communication Server X4.1.0 Vsecurity Tandberg Video Communication Server X3.1.0 Vsecurity Tandberg Video Communication Server X3.0.0 Vsecurity Tandberg Video Communication Server X1.1.0 Vsecurity Tandberg Video Communication Server Vsecurity Tandberg Video Communication Server X4.2.0 Vsecurity Tandberg Video Communication Server X1.2.0 Vsecurity Tandberg Video Communication Server X2.0.0

The SSH service on the TANDBERG Video Communication Server (VCS) before X5.1 uses a fixed DSA key, which makes it easier for remote malicious users to conduct man-in-the-middle attacks and spoof arbitrary servers via crafted SSH packets.

Vsecurity Tandberg Video Communication Server X2.1.0 Vsecurity Tandberg Video Communication Server X1.0.0 Vsecurity Tandberg Video Communication Server X4.1.0 Vsecurity Tandberg Video Communication Server X3.1.0 Vsecurity Tandberg Video Communication Server X3.0.0 Vsecurity Tandberg Video Communication Server X1.1.0 Vsecurity Tandberg Video Communication Server X4.2.0 Vsecurity Tandberg Video Communication Server Vsecurity Tandberg Video Communication Server X4.2.1 Vsecurity Tandberg Video Communication Server X1.2.0 Vsecurity Tandberg Video Communication Server X4.3.0 Vsecurity Tandberg Video Communication Server X2.0.0

1 Github repository

Cross-site scripting (XSS) vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors, aka Reference ID 66316.

Vsecurity Tandberg Video Communication Server X2.1.0 Vsecurity Tandberg Video Communication Server X1.0.0 Vsecurity Tandberg Video Communication Server X4.1.0 Vsecurity Tandberg Video Communication Server X3.1.0 Vsecurity Tandberg Video Communication Server X3.0.0 Vsecurity Tandberg Video Communication Server X1.1.0 Vsecurity Tandberg Video Communication Server X4.2.0 Vsecurity Tandberg Video Communication Server Vsecurity Tandberg Video Communication Server X4.2.1 Vsecurity Tandberg Video Communication Server X1.2.0 Vsecurity Tandberg Video Communication Server X2.0.0

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to (1) helppage.php or (2) user/helppage...

Vsecurity Tandberg Video Communication Server X4.1.0 Vsecurity Tandberg Video Communication Server X4.2.0 Vsecurity Tandberg Video Communication Server X1.1.0 Vsecurity Tandberg Video Communication Server X1.2.0 Vsecurity Tandberg Video Communication Server X4.2.1 Vsecurity Tandberg Video Communication Server X1.0.0 Vsecurity Tandberg Video Communication Server X3.0.0 Vsecurity Tandberg Video Communication Server X3.1.0 Vsecurity Tandberg Video Communication Server X2.0.0 Vsecurity Tandberg Video Communication Server X2.1.0 Vsecurity Tandberg Video Communication Server

1 EDB exploit

Unspecified vulnerability on the TANDBERG Video Communication Server (VCS) before X5.0 allows remote malicious users to execute arbitrary code via unknown vectors, aka Reference ID 69773.

Vsecurity Tandberg Video Communication Server X2.1.0 Vsecurity Tandberg Video Communication Server X1.0.0 Vsecurity Tandberg Video Communication Server X4.1.0 Vsecurity Tandberg Video Communication Server X3.1.0 Vsecurity Tandberg Video Communication Server X3.0.0 Vsecurity Tandberg Video Communication Server X1.1.0 Vsecurity Tandberg Video Communication Server X4.2.0 Vsecurity Tandberg Video Communication Server Vsecurity Tandberg Video Communication Server X4.2.1 Vsecurity Tandberg Video Communication Server X1.2.0 Vsecurity Tandberg Video Communication Server X2.0.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook