Filtered by vendor Liftoffsoftware Subscriptions
Filtered by product Gateone Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-35736 1 Liftoffsoftware 1 Gateone 2024-11-21 7.5 High
GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused.
CVE-2020-20184 1 Liftoffsoftware 1 Gateone 2024-11-21 9.8 Critical
GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection.