CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2021-22914
https://notcve.org/view.php?id=CVE-2021-22914
Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue affects all versions of Citrix Cloud Connector that were installed by passing secure client parameters for installation via the command line. The issue does not affect Citrix Cloud Connector if it was installed using the interactive installer or where a parameter file was used with the command-line installer. Citrix Cloud Connector versiones anteriores a 6.31.0.62192, sufre de almacenamiento no seguro de información confidencial debido a que la información confidencial es almacenada en los archivos de registro de instalación de Citrix Cloud Connector. • https://support.citrix.com/article/CTX316690 • CWE-922: Insecure Storage of Sensitive Information •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-0246
https://notcve.org/view.php?id=CVE-2019-0246
SAP Cloud Connector, before version 2.11.3, does not perform any authentication checks for functionalities that require user identity. SAP Cloud Connector, en versiones anteriores a la 2.11.3, no realiza comprobaciones de autenticación para funcionalidades que requieren la identidad del usuario. • http://www.securityfocus.com/bid/106463 https://launchpad.support.sap.com/#/notes/2696233 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985 • CWE-306: Missing Authentication for Critical Function •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-0247
https://notcve.org/view.php?id=CVE-2019-0247
SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application. SAP Cloud Connector, en versiones anteriores a la 2.11.3, permite que un atacante inyecte código que puede ser ejecutado por la aplicación. Un atacante podría, por lo tanto, controlar el comportamiento de la aplicación. • https://launchpad.support.sap.com/#/notes/2696233 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985 • CWE-94: Improper Control of Generation of Code ('Code Injection') •