Lucene search
MitreCVELIST:CVE-2021-38299HistorySep 27, 2021 - 5:55 a.m.
CVE-2021-38299
2021-09-2705:55:51
mitre
www.cve.org
5
webauthn framework
incorrect access control
fido2 authenticator
user presence
Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control. An attacker that controls a user’s system is able to login to a vulnerable service using an attached FIDO2 authenticator without passing a check of the user presence.
Related
veracode
veracode
Insecure Access Control
2021-09-28 05:08:52
prion
prion
Design/Logic Flaw
2021-09-27 06:15:00
osv
osv
CVE-2021-38299
2021-09-27 06:15:07
Improper Access Control in Webauthn Framework
2021-09-29 17:16:07
nextcloud
nextcloud
Missing User Presence Check in Nextcloud WebAuthn login
2021-10-25 11:02:44
github
github
Improper Access Control in Webauthn Framework
2021-09-29 17:16:07
cve
cve
CVE-2021-38299
2021-09-27 06:15:07
nvd
nvd
CVE-2021-38299
2021-09-27 06:15:07