Skip to content
OpenAdvisories

Vendor

VestaCP

2 known vulnerabilities.

Products

VestaCP 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2020-36948

    VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation

    VestaCP 0.9.8-26 contains a session token vulnerability in the LoginAs module that allows remote attackers to manipulate authentication tokens. Attackers can exploit insufficient token validation to access user accounts and perform unauthorized login requests…

    VestaCP VestaCP