Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2021-36231
Disclosure Date: August 31, 2021 (last updated February 23, 2025)
Deserialization of untrusted data in multiple functions in MIK.starlight 7.9.5.24363 allows authenticated remote attackers to execute operating system commands by crafting serialized objects.
0
Attacker Value
Unknown
CVE-2021-36232
Disclosure Date: August 31, 2021 (last updated February 23, 2025)
Improper Authorization in multiple functions in MIK.starlight 7.9.5.24363 allows an authenticated attacker to escalate privileges.
0
Attacker Value
Unknown
CVE-2021-36233
Disclosure Date: August 31, 2021 (last updated February 23, 2025)
The function AdminGetFirstFileContentByFilePath in MIK.starlight 7.9.5.24363 allows (by design) an authenticated attacker to read arbitrary files from the filesystem by specifying the file path.
0
Attacker Value
Unknown
CVE-2021-36234
Disclosure Date: August 31, 2021 (last updated February 23, 2025)
Use of a hard-coded cryptographic key in MIK.starlight 7.9.5.24363 allows local users to decrypt credentials via unspecified vectors.
0
