Access Controller vulnerabilities

2 known vulnerabilities in Access Controller from Cassianetworks. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Access Controller: Improper Authentication

  CVE-2023-35794Oct 27, 2023CassianetworksEPSS 1.22%

  An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) can be accessed without authentication. Specifically, there is no session cookie validation on the Access Controller; instead, there is only B

• 8.8 High severity

  Access Controller: Cross-Site Request Forgery

  CVE-2023-35793Sep 27, 2023CassianetworksEPSS 1.08%

  An issue was discovered in Cassia Access Controller 2.1.1.2303271039. Establishing a web SSH session to gateways is vulnerable to Cross Site Request Forgery (CSRF) attacks.