PatchTheCVE4mosan vulnerabilities
Recent CVEs affecting 4mosan products. 2 tracked.
4mosan has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-12-20. Highest priority: CVE-2021-42338 (score 63/100).
- CVE-2021-44159 CRITICAL 9.8 UPGRADE 4MOSAn GCB Doctor’s file upload function has improper user privilege control
- CVE-2021-42338 CRITICAL 9.8 UPGRADE 4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attac
FAQ
How do I fix 4mosan vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 4mosan being exploited right now?
None of the tracked 4mosan CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 4mosan CVE should I patch first?
CVE-2021-42338 currently ranks highest (63/100): 4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attac.