Skip to content
OpenAdvisories

Vendor

Fidelis Cybersecurity

13 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2022-0486 Public exploit

    Privileged Command Injection Vulnerability in Fidelis Network and Deception

    Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent t…

  • Medium 6.5

    User Credentials Stored in a Recoverable Format within Fidelis Network and Deception

    User credentials stored in a recoverable format within Fidelis Network and Deception CommandPost. In the event that an attacker gains access to the CommandPost, these values could be decoded and used to login to the application. The vulnerability is present i…