Security Advisories
Ava-298: unauthorized read of vcore webhooks API
Release Date
17th August 2020.
Overview
A logged in vcore user could view the configured webhooks...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-299: Hash of API token published to subscribed users after creation
Release Date
17th August 2020.
Overview
A logged in vcore user could subsc...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-311: Authenticated attacker can change description of cloud backups owned by different Ava Appliance
Release Date
15th October 2020.
Overview
...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-317: Video encryption key logged during video export
Release Date
11th November 2020.
Overview
The video encryption key was logged when export...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-320: Permissions were not enforced for Ava Aware Counts rules
Release Date
18th November 2020.
Overview
Any authenticated Ava Aware user could...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-318, Ava-319: Download of camera credentials without the appropriate permissions
Release Date
11th November 2020
Overview
An authenticated Ava...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-322: Specially crafted x.509 certificates can lead to DoS of all Ava Video products
Release Date
18th November 2020.
Overview
A vulnerability
in...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-327: Insufficient authorization of timeline requests by Ava Aware guest users
Release Date
2nd December 2020.
Overview
Users that accessed Ava...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-330: Specially crafted bitstreams can lead to DoS of Ava Aware
Release Date
26th November 2020.
Overview
Insufficient checks on media received b...
Wed, 9 Dec, 2020 at 10:59 AM
Ava-335: DoS of Ava Aware via API
Release Date
2nd December 2020.
Overview
An Ava Aware user without permissions to view alarms could perform a
de...
Wed, 9 Dec, 2020 at 10:59 AM