Consona products uses a proprietary ActiveX site-lock mechanism that can be defeated through XSS attacks. Once an attacker can inject arbitrary JS code within the context of an allowed domain, unsafe methods can invoked to download and execute arbitrary binaries. A local privilege escalation flaw discovered in the Consona's Repair Service can be used to bypass IE8 Protected Mode, thus gaining SYSTEM privileges.
60dc5031646713bbf359f4aa1393fda67c72eb7e5d7cb4926fed44ab1fda9840Multiple Consona products suffered from a password reset security bypass vulnerability.
0fe34dce0e94a1c42bffc704336859d967709194427648dc8ac4d612faa4d4ac
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed