VYPR

Analytics

by Versa Networks

CVEs (2)

  • CVE-2018-16497HigMay 26, 2021
    risk 0.51cvss 7.8epss 0.00

    In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the server. If the job is run as the user root, there is a potential privilege escalation vulnerability. In this case, the job runs a script as root that is…

  • CVE-2019-25030MedMay 26, 2021
    risk 0.36cvss 5.5epss 0.00

    In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage. Popular hashing algorithms based on the Merkle-Damgardconstruction (such as MD5 and SHA-1) alone are insufficient in…