CERN
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| White Rabbit Switch | 2 | – | Apr 24, 2023 |
| Indico | 1 | – | Jan 16, 2025 |
Exploited and recent CVEs
- CVE-2024-50633 A Broken Object Level Authorization (BOLA) vulnerability in Indico through 3.3.5 allows attackers to read information by sending a crafted POST request to the component /api/principals. NOTE: this is 0.6%
- CVE-2023-22577 White Rabbit Switch - Password Disclosure Vulnerability 0.8%
- CVE-2023-22581 White Rabbit Switch - Unauthenticated remote code execution 0.7%