PatchTheCVEveridiumad vulnerabilities and fixes
Recent CVEs affecting veridiumad, with upgrade or downgrade steps. 4 tracked.
veridiumad has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-04-03. Highest priority: CVE-2023-44039 (score 48/100).
- CVE-2023-45552 MEDIUM 6.5 UPGRADE In VeridiumID before 3.5.0, a stored cross-site scripting (XSS) vulnerability has been discovered in the admin
- CVE-2023-44040 MEDIUM 6.1 UPGRADE In VeridiumID before 3.5.0, the identity provider page is susceptible to a cross-site scripting (XSS) vulnerab
- CVE-2023-44039 CRITICAL 9.1 UPGRADE In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollm
- CVE-2023-44038 MEDIUM 6.5 UPGRADE In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover informat
FAQ
How do I fix veridiumad vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is veridiumad being exploited right now?
None of the tracked veridiumad CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which veridiumad CVE should I patch first?
CVE-2023-44039 currently ranks highest (48/100): In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollm.