Red Lion Controls Crimson 3.0 versions 707.000 and prior, Crimson 3.1 versions 3126.001 and prior, and Crimson 3.2 versions 3.2.0044.0 and prior are vulnerable to path traversal. When attempting to open a file using a specific path, the user's password hash is sent to an arbitrary host. This could allow an attacker to obtain user credential hashes.
2022-11-17T22:15:10.700
2024-11-21T07:18:48.330
Modified
CVSSv3.1: 7.5 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | redlion | crimson | < 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.0 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.1 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |
| Application | redlion | crimson | 3.2 | Yes |