Azienda Sicura

Lista CVE 2021/32xxx

CVE-2021-32001 (clone-master-clean-up: dangerous file system operations)

CVE-2021-32002 (K3s/RKE2 bootstrap data is encrypted with empty string if user does not supply a token)

CVE-2021-32003 (SiteManager troubleshooter allows access without authentication from local network )

CVE-2021-32004 (Configuration service port remains open 10 minutes after reboot even when already provisioned)

CVE-2021-32005 (GateManager does not enforce strict hostname matching for WEB server)

CVE-2021-32006 (SiteManager Log View XSS Issue)

CVE-2021-32007 (GateManager information leak for LinkManager Users)

CVE-2021-32008 (Missing security header: Referrer-Policy URL)

CVE-2021-32009 (Logged-in Administrator may get unrestricted file system access)

CVE-2021-32010 (Missing XSS guards on firmware page)

CVE-2021-32012 (Clients may connect to a GateManager with TLS 1.0)