Secureauth

secureauth

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Secureauth Identity Provider

secureauth_identity_provider

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-31800 2Fedoraproject Secureauth 2Fedora Impacket Jun 17, 2026 May 5, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This...Show more Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.Show less
CVE-2020-9437 1Secureauth 1Secureauth Identity Provider Jun 17, 2026 Jun 25, 2020 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-31800

2Fedoraproject

Secureauth

2Fedora

Impacket

Jun 17, 2026

May 5, 2021

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.Show less

CVE-2020-9437

1Secureauth

1Secureauth Identity Provider

Jun 17, 2026

Jun 25, 2020

N/A· v4

4.8 MEDIUM· v3

3.5 LOW· v2

SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.