CVE-2017-14013
Published Oct 17, 2017A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the us…
Vendor/product archive
prominent / multiflex_m10a_controller_firmware CVEs
Beta · best-effort5 CVEs tagged to prominent / multiflex_m10a_controller_firmware — 0 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2017-14011
Published Oct 17, 2017A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests, making it susceptibl…
CVE-2017-14009
Published Oct 17, 2017An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated user uses the Change Password feature on the application,…
CVE-2017-14007
Published Oct 17, 2017An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended period beyond the las…
CVE-2017-14005
Published Oct 17, 2017An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a new password for a user, the application does not require t…
Showing 1-5 of 5 CVEsPage 1 of 1