Skip to content
OpenAdvisories

Product · beenuar

AiSOC

6 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.9

    AiSOC 12.1.0 before 23.3.0 contains a missing authentication vulnerability that allows unauthenticated attackers to que…

  • Medium 4.3

    AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints

    AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast m…

  • Medium 5.4

    AiSOC 9.0.0 before 12.0.0 Missing Authentication on Actions Service Response-Action API

    AiSOC versions 9.0.0 before 12.0.0 fail to enforce authentication on the response-action API endpoints when AISOC_DEV_MODE is enabled and AISOC_ACTIONS_SERVICE_TOKEN is empty in the default Docker Compose deployment. Unauthenticated attackers can list respons…