PatchTheCVEontrack vulnerabilities and fixes
Recent CVEs affecting ontrack, with upgrade or downgrade steps. 2 tracked.
ontrack has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-09-08. Highest priority: CVE-2022-37164 (score 53/100).
- CVE-2022-37164 CRITICAL 9.8 DOWNGRADE Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized acce
- CVE-2022-34192 MEDIUM 5.4 UPGRADE Jenkins ontrack Jenkins Plugin 4.0.0 and earlier does not escape the name of Ontrack: Multi Parameter choice,
FAQ
How do I fix ontrack vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ontrack being exploited right now?
None of the tracked ontrack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ontrack CVE should I patch first?
CVE-2022-37164 currently ranks highest (53/100): Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized acce.