Description
TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| TrueConf Server | TrueConf / TrueConf Server | >= *, < 5.3 | affected |
| TrueConf Server | TrueConf / TrueConf Server | >= 5.3, < 5.3.9 | affected |
| TrueConf Server | TrueConf / TrueConf Server | >= 5.4, < 5.4.9 | affected |
| TrueConf Server | TrueConf / TrueConf Server | >= 5.5, < 5.5.5 | affected |