PatchTheCVEglobalnorthstar vulnerabilities
Recent CVEs affecting globalnorthstar products. 7 tracked.
globalnorthstar has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-16. Highest priority: CVE-2021-29393 (score 62/100).
- CVE-2022-26959 CRITICAL 10.0 DOWNGRADE There are two full (read/write) Blind/Time-based SQL injection vulnerabilities in the Northstar Club Managemen
- CVE-2021-29398 MEDIUM 5.3 DOWNGRADE Directory traversal in /northstar/Common/NorthFileManager/fileManagerObjects.jsp Northstar Technologies Inc No
- CVE-2021-29397 HIGH 7.5 DOWNGRADE Cleartext Transmission of Sensitive Information in /northstar/Admin/login.jsp in Northstar Technologies Inc No
- CVE-2021-29396 CRITICAL 9.8 DOWNGRADE Systemic Insecure Permissions in Northstar Technologies Inc NorthStar Club Management 6.3 allows remote unauth
- CVE-2021-29395 HIGH 7.5 DOWNGRADE Directory travesal in /northstar/filemanager/download.jsp in Northstar Technologies Inc NorthStar Club Managem
- CVE-2021-29394 MEDIUM 6.5 DOWNGRADE Account Hijacking in /northstar/Admin/changePassword.jsp in Northstar Technologies Inc NorthStar Club Manageme
- CVE-2021-29393 CRITICAL 9.8 DOWNGRADE Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Managemen
FAQ
How do I fix globalnorthstar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is globalnorthstar being exploited right now?
None of the tracked globalnorthstar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which globalnorthstar CVE should I patch first?
CVE-2021-29393 currently ranks highest (62/100): Remote Code Execution in cominput.jsp and comoutput.jsp in Northstar Technologies Inc NorthStar Club Managemen.