The component in (1) /luci/homebase and (2) /luci/cluster menu in Red Hat Conga 0.12.2 allows remote authenticated users to bypass

Red Hat Conga 0.12.2 allows remote attackers to obtain sensitive information via a crafted request to the (1) homebase, (2) cluste

Luci in Red Hat Conga does not properly enforce the user session timeout, which might allow attackers to gain access to the sessio

Luci in Red Hat Conga stores the user's username and password in a Base64 encoded string in the __ac session cookie, which allows

Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers t

The ricci daemon in Red Hat Conga 0.10.0 allows remote attackers to cause a denial of service (loss of new connections) by repeate

The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by storing the p