Conga (Redhat) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2014-10-06. Vendor: Redhat.

CVEs of Conga

• CVE-2014-3521 - CVSS 5.5 (medium), 2014-10-06: The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass intended access…
• CVE-2013-6496 - CVSS 5 (medium), 2014-10-06: Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase, (2) cluster, (3) storage, (4)…
• CVE-2013-7347 - CVSS 3.7 (low), 2014-03-31: Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the session by reading the __ac…
• CVE-2012-3359 - CVSS 3.7 (low), 2014-03-31: Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows attackers to gain privileges…
• CVE-2011-0720 - CVSS 7.5 (high), 2011-02-03: Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative…
• CVE-2007-4136 - CVSS 5 (medium), 2007-11-14: The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeatedly sending data or…