tm4web vulnerabilities

1 known vulnerability in tm4web from Trimble. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  tm4web: Incorrect Default Permissions

  CVE-2023-27195Nov 8, 2024TrimbleEPSS 1.01%

  Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code