Description
An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.
Remediation
References
Related Vulnerabilities
WordPress Plugin Pricing Table by Supsystic Cross-Site Request Forgery (1.8.0)
WordPress Plugin WordPress Social Login Cross-Site Scripting (2.0.3)
Moodle CVE-2021-36402 Vulnerability (CVE-2021-36402)
WordPress Plugin Katalyst TimThumb 'timthumb.php' Arbitrary File Upload (1.0)
ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9044)