Terminal Handler vulnerabilities

2 known vulnerabilities in Terminal Handler from Ncratleos. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Terminal Handler: Cross-Site Request Forgery

  CVE-2023-47020Feb 8, 2024Ncratleos

  Multiple Cross-Site Request Forgery (CSRF) chaining in NCR Terminal Handler v.1.5.1 allows privileges to be escalated by an attacker through a crafted request involving user account creation and adding the user to an administrator group. This is exploited by a

• 8.8 High severity

  Terminal Handler: Cross-Site Request Forgery

  CVE-2023-47024Jan 20, 2024Ncratleos

  Cross-Site Request Forgery (CSRF) in NCR Terminal Handler v.1.5.1 leads to a one-click account takeover. This is achieved by exploiting multiple vulnerabilities, including an undisclosed function in the WSDL that has weak security controls and can accept custo