Simone Bossi and Raffaele Bova at Nozomi Networks finder

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.