Changing Inc. Nhiservisignadapter
5 CVEs affecting Changing Inc. Nhiservisignadapter. Latest disclosed: 2020-12-31. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-25844 | High | 8.1 | 2020-12-31 | The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers… |
CVE-2020-25843 | High | 8.1 | 2020-12-31 | NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to… |
CVE-2020-25846 | High | 7.5 | 2020-12-31 | The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a maliciou… |
CVE-2020-25845 | High | 7.5 | 2020-12-31 | Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting… |
CVE-2020-25842 | High | 7.5 | 2020-12-31 | The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without… |