Vulnerabilities in SoftIron

6 results

Vexday analysis

A SoftIron apresenta um perfil de risco baixo com apenas 6 vulnerabilidades catalogadas e nenhuma sob ataque ativo ou crítica. A fraqueza dominante (CWE-269 — Improper Handling of Privileges) sugere falhas na gestão de permissões, mas a ausência de atividade recente de exploração e atualizações indica que o risco está sob controle.

CVE-2024-13058MEDIUMAuthenticated, non-admin users can create storage pools via the sifi APIEPSS 0.4%CVE-2023-45083MEDIUMHyperCloud: "admin" and "serveradmin" users can be deletedEPSS 0.2%CVE-2023-45084HIGHMedia caddy removal and reinsertion without reboot may cause data lossEPSS 0.2%CVE-2023-45085LOWWhen compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"EPSS 0.2%CVE-2026-1842MEDIUMHyperCloud Improper Refresh Token Validation and Access Token Invalidation Allows Long-Term Unauthorized AccessEPSS 0.2%CVE-2025-10650LOWImproper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative UsersEPSS 0.1%