Vulnerabilities > Riverbed > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-06-03 CVE-2021-43271 Information Exposure Through Log Files vulnerability in Riverbed Appresponse
Riverbed AppResponse 11.8.0, 11.8.5, 11.8.5a, 11.9.0, 11.9.0a, 11.10.0, 11.11.0, 11.11.0a, 11.11.1, 11.11.1a, 11.11.5, and 11.11.5a (when configured to use local, RADIUS, or TACACS authentication) logs usernames and passwords if either is entered incorrectly.
network
low complexity
riverbed CWE-532
6.8
2022-03-10 CVE-2021-42856 Cross-site Scripting vulnerability in Riverbed Steelcentral Appinternals Dynamic Sampling Agent 10.0.0/11.0.0/12.0.0
It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack.
network
low complexity
riverbed CWE-79
6.1
2022-03-10 CVE-2021-42857 Path Traversal vulnerability in Riverbed Steelcentral Appinternals Dynamic Sampling Agent 10.0.0/11.0.0/12.0.0
It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities at the "/api/appInternals/1.0/agent/da/pcf" API.
network
low complexity
riverbed CWE-22
5.3
2017-08-26 CVE-2017-7693 Path Traversal vulnerability in Riverbed Opnet APP Response Xpert 9.6.1
Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX) version 9.6.1 allows remote authenticated users to inject arbitrary commands to read OS files.
network
low complexity
riverbed CWE-22
6.5
2017-04-04 CVE-2017-7307 Incorrect Permission Assignment for Critical Resource vulnerability in Riverbed Rios
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root privileges and access decrypted data by replacing the /opt/tms/bin/cli file.
low complexity
riverbed CWE-732
6.8
2017-04-04 CVE-2017-7306 Weak Password Requirements vulnerability in Riverbed Rios
Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number.
high complexity
riverbed CWE-521
6.4
2017-04-04 CVE-2017-7305 Weak Password Requirements vulnerability in Riverbed Rios
Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot.
low complexity
riverbed CWE-521
4.6
2017-04-04 CVE-2017-5670 Information Exposure vulnerability in Riverbed Rios
Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain sensitive information by reading raw disk blocks.
low complexity
riverbed CWE-200
4.6