All packages
Marval MSM vulnerabilities
3 known CVE vulnerabilities in Marval MSM, translated and rated.
- CVE-2023-33282Critical
Marval MSM versions up to 14.19.0.12476 and 15.0 have a System account with default credentials. A remote attacker can log in and create a valid session, allowing backend calls to application endpoints.
- CVE-2023-33284High
Marval MSM versions up to 14.19.0.12476 and 15.0 have a Remote Code Execution vulnerability. A remote attacker authenticated as any user can execute code in the context of the web server.
- CVE-2023-33283Medium
Marval MSM through version 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them using this key.