Skip to content
OpenAdvisories

Vendor

Tibbo Systems

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.9

    Tibbo AggreGate Network Manager < 6.40.05 System Information Exposure

    Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp. The page discloses Java system properties, server path details, and version information to unauthorized users, resulting…

  • Medium 6.9

    Tibbo AggreGate Network Manager < 6.40.05 Login Functionality User Enumeration

    Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer v…