Skip to content
OpenAdvisories

Vendor

ubccr

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.3

    Open XDMoD has Broken Access Control via Client-Controlled Session Variable

    OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted HTTPS POST request that sets a session variable used for authorization decisio…