PatchTheCVEdma radius manager vulnerabilities and fixes
Recent CVEs affecting dma radius manager, with upgrade or downgrade steps. 2 tracked.
Also searched as: dmaradiusmanager.
dma radius manager has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-04-02. Highest priority: CVE-2021-29012 (score 66/100).
- CVE-2021-29012 CRITICAL 9.8 DOWNGRADE DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session
- CVE-2021-29011 MEDIUM 6.1 DOWNGRADE DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or addre
FAQ
How do I fix dma radius manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dma radius manager being exploited right now?
None of the tracked dma radius manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dma radius manager CVE should I patch first?
CVE-2021-29012 currently ranks highest (66/100): DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.