Skip to content
OpenAdvisories
Medium ICSA-21-180-06 1 CVE

Claroty Secure Remote Access Site

Published Jun 29, 2021 · Updated Jun 29, 2021

Vendor: Claroty Product: Secure Remote Access (SRA) Site

Summary

Successful exploitation of this vulnerability enables an attacker with local (Linux) system access to bypass access controls for the central configuration file of the SRA Site software.

Vulnerabilities 1

  • Medium 5.5
    CVE-2021-32958

    Claroty Secure Remote Access Site - Authentication Bypass Using an Alternate Path or Channel

    Successful exploitation of this vulnerability on Claroty Secure Remote Access (SRA) Site versions 3.0 through 3.2 allows an attacker with local command line interface access to gain the secret key, subsequently allowing them to generate valid session tokens f…

    Claroty Secure Remote Access (SRA) Site

Revision history

  1. #1

    ICSA-21-180-06 Claroty Secure Remote Access Site

References