BoKS Manager vulnerabilities
3 known vulnerabilities in BoKS Manager from Fortra. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
BoKS Manager: Out-of-bounds Read
Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restart
- 7.9 High severity
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert.
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able to
- 9.1 Critical severity
BoKS Manager: Improper Neutralization of Special Elements used in an OS Command
Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl command-line interface could cause shell command substitution to be processed by c