Skip to content
OpenAdvisories

Vendor

Velneo

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.0

    Arbitrary File Read via Symlink in Velneo vServer HTTP Server

    Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.

  • Medium 6.3

    Velneo vClient Improper authentication

    Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials.