6.5
Medium
CVE-2024-28022 A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary…
Description
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account.
Affected products and versions
Other CVEs of FOXMAN-UN
The 15 CVEs of FOXMAN-UN →
CVE-2024-28020
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application
and server management
8.0
High
CVE-2024-28024
A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource…
4.1
Medium
CVE-2024-28023
A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or…
5.7
Medium
CVE-2024-28021
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate…
7.4
High