Snow License Manager vulnerabilities

2 known vulnerabilities in Snow License Manager from Snowsoftware. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Snow License Manager: Improper Authentication

  CVE-2024-4129May 14, 2024Snow Software AB

  Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an Authentication Bypass if Active Directory Authentication is enabled.This issue affects Snow License Manager: from 9.33.2 through

• 7.2 High severity

  SLM: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-3864Aug 11, 2023Snow Software

  Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with high privileges to inject SQL commands via the web portal.