VYPR

Nervepoint Access Manager

by LogonBox

CVEs (1)

  • CVE-2019-6716Mar 17, 2019
    risk 0.03cvss epss 0.10

    An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs (backup and synchronization…