Servisnet Tessa
3 CVEs affecting Servisnet Tessa. Latest disclosed: 2022-02-06. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-22832 | Critical | 9.8 | 2022-02-06 | An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request. |
CVE-2022-22831 | Critical | 9.8 | 2022-02-06 | An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header. |
CVE-2022-22833 | High | 7.5 | 2022-02-06 | An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request. |