Ironmansoftware vulnerabilities
We track 3 vulnerabilities in Ironmansoftware products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 23, 2023.
Latest Ironmansoftware vulnerabilities
- 8.8 High severity
Powershell Universal: Improper Neutralization of Special Elements used in a Command
The API endpoints in Ironman PowerShell Universal 3.0.0 through 4.2.0 allow remote attackers to execute arbitrary commands via crafted HTTP requests if a param block is used, due to invalid sanitization of input strings. The fixed versions are 3.10.2, 4.1.10,
- 7.2 High severity
Powershell Universal: Improper Limitation of a Pathname to a Restricted Directory
The Web Server in Ironman Software PowerShell Universal v3.x and v2.x allows for directory traversal outside of the configuration directory, which allows a remote attacker with administrator privilege to create, delete, update, and display files outside of the
- 8.8 High severity
Powershell Universal: Improper Privilege Management
Escalation of privileges in the Web Server in Ironman Software PowerShell Universal 2.x and 3.x allows an attacker with a valid app token to retrieve other app tokens by ID via an HTTP web request. Patched Versions are 3.5.3, 3.4.7, and 2.12.6.