CERN vulnerabilities
We track 3 vulnerabilities in CERN products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 16, 2025.
Latest CERN vulnerabilities
- 7.5 High severity
Indico: Insertion of Sensitive Information Into Sent Data
A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is disputed by the Supplier because the product intentionally l
- 9.8 Critical severity
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to…
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application (the default installation makes the webserver run as the root user).
- 7.5 High severity
White Rabbit Switch: Exposure of Sensitive Information to an Unauthorized Actor
Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings.