Ootbi vulnerabilities

2 known vulnerabilities in Ootbi from Objectfirst. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Ootbi: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

  CVE-2022-44796Nov 7, 2022Objectfirst

  An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function tha

• 8.8 High severity

  Ootbi: Improper Control of Generation of Code

  CVE-2022-44794Nov 7, 2022ObjectfirstEPSS 1.15%

  An issue was discovered in Object First Ootbi BETA build 1.0.7.712. Management protocol has a flow which allows a remote attacker to execute arbitrary Bash code with root privileges. The command that sets the hostname doesn't validate input parameters. As a re