Lucene search
PRIOn knowledge basePRION:CVE-2023-26261HistoryMar 08, 2023 - 3:15 p.m.
Design/Logic Flaw
2023-03-0815:15:00
PRIOn knowledge base
www.prio-n.com
2
ubika waap
xpath injection
authentication bypass
fixed versions 6.11.0
fixed versions 6.5.6-patch15
In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixed versions are WAAP Gateway & Cloud 6.11.0 and 6.5.6-patch15.
| CPE | Name | Operator | Version |
|---|---|---|---|
| waap_cloud | lt | 6.11.0 | |
| waap_cloud | eq | 6.5.6 | |
| waap_cloud | lt | 6.5.6 | |
| waap_gateway | lt | 6.11.0 | |
| waap_gateway | eq | 6.5.6 | |
| waap_gateway | lt | 6.5.6 |
Related
nvd
nvd
CVE-2023-26261
2023-03-08 15:15:10
cvelist
cvelist
CVE-2023-26261
2023-03-08 00:00:00
cve
cve
CVE-2023-26261
2023-03-08 15:15:10