Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-29484 | 1 Terminalfour | 1 Terminalfour | 2023-10-24 | N/A | 6.5 MEDIUM |
In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password. | |||||
CVE-2023-23591 | 1 Terminalfour | 1 Terminalfour | 2023-04-19 | N/A | 4.9 MEDIUM |
The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1. | |||||
CVE-2022-30770 | 1 Terminalfour | 1 Terminalfour | 2022-10-27 | 4.3 MEDIUM | 6.1 MEDIUM |
Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnerability that could be exploited by an attacker to mislead an administrator and steal their credentials. |