Skip to content
Threat Feed
Subscribe

Vendor

Proxmox

3 briefs RSS
critical advisory

Authentication Bypass in Proxmox Virtual Environment

CVE-2023-54391 allows unauthenticated remote attackers to bypass authentication in Proxmox VE 7.0-8.0 by providing a crafted tfa-challenge parameter to the API login endpoint.

Proxmox Virtual Environment vulnerability authentication-bypass critical
1r 1t 1c
low advisory

Proxmox Backup Server Information Disclosure and File Manipulation Vulnerability

Proxmox Backup Server contains a vulnerability (CVE-2024-8916) that allows a local attacker to manipulate files and disclose sensitive information due to improper access controls.

Proxmox Backup Server
1c
medium threat

Multiple Vulnerabilities in Proxmox Virtual Environment

An attacker can exploit multiple vulnerabilities in Proxmox Virtual Environment to conduct Cross-Site Scripting attacks, bypass security measures, and disclose confidential information, potentially leading to unauthorized data access or session hijacking.

exploited Proxmox Virtual Environment vulnerability web-application xss information-disclosure proxmox
1t