Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Velneo vClient improper authentication
Vulnerability Description
Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against the server.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
Vulnerability Type
使用欺骗进行的认证绕过
Vulnerability Title
Velneo vClient 授权问题漏洞
Vulnerability Description
Velneo vClient是Velneo公司的一个完整的企业应用程序开发平台。 Velneo vClient 28.1.3版本存在安全漏洞，该漏洞源于可能允许知道受害者用户名和散列密码的攻击者在服务器上欺骗受害者的ID。
CVSS Information
N/A
Vulnerability Type
N/A