2N Access Commander vulnerabilities
4 known vulnerabilities in 2N Access Commander from 2N Telekomunikace a.s.. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing…
2N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.
- 7.2 High severity
2N Access Commander: Improper Validation of Syntactic Correctness of Input
Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption. This vulnerability can only be exploited after authenticating with administrator privileges.
- 7.2 High severity
2N Access Commander: Improper Output Neutralization for Logs
2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator
- 7.2 High severity
2N Access Commander: Improper Neutralization of Special Elements used in an OS Command
API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges.