saltosystem Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/saltosystem/ Sun, 26 Feb 2023 06:32:05 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png saltosystem Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/saltosystem/ 32 32 CVE-2019-19457 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19457/ Sun, 26 Feb 2023 06:32:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19457/ SALTO ProAccess SPACE 5.4.3.0 allows XSS.

The post CVE-2019-19457 appeared first on CVE Vulnerability.

]]> SALTO ProAccess SPACE 5.4.3.0 allows XSS.

The post CVE-2019-19457 appeared first on CVE Vulnerability.

]]> CVE-2019-19458 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19458/ Sun, 26 Feb 2023 06:32:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19458/ SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.

The post CVE-2019-19458 appeared first on CVE Vulnerability.

]]> SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature.

The post CVE-2019-19458 appeared first on CVE Vulnerability.

]]> CVE-2019-19459 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19459/ Sun, 26 Feb 2023 06:32:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19459/ An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE-2019-19458 files under the web root, or .bat files that will be used with auto start. This allows an attacker to execute arbitrary commands on the server.

The post CVE-2019-19459 appeared first on CVE Vulnerability.

]]> An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE-2019-19458 files under the web root, or .bat files that will be used with auto start. This allows an attacker to execute arbitrary commands on the server.

The post CVE-2019-19459 appeared first on CVE Vulnerability.

]]> CVE-2019-19460 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-19460/ Sun, 26 Feb 2023 06:32:05 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-19460/ An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product’s webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because […]

The post CVE-2019-19460 appeared first on CVE Vulnerability.

]]> An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. The product’s webserver runs as a Windows service with local SYSTEM permissions by default. This is against the principle of least privilege. An attacker who is able to exploit CVE-2019-19458 or CVE-2019-19459 is basically able to write to every single path on the file system, because the webserver is running with the highest privileges available.

The post CVE-2019-19460 appeared first on CVE Vulnerability.

]]>