233 matches found
Denial of service
A unauthenticated denial of service vulnerability exists in Citrix ADC 13.0-83.27, 12.1-63.22 and 11.1-65.23 when configured as a VPN Gateway or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication...
How to add text message on Gateway logon page that AAA authentication enabled.
In AAA authentication profiled configured Gateway Virtual server, you may found the rewrite policy method to addsome texts on Netscaler Gateway logon page is no longer effective. This is because the portal layout mechanism is changed compared with basic authentication policy scenario. Before we g...
CVE-2021-31366 Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS
An Unchecked Return Value vulnerability in the authd authentication daemon of Juniper Networks Junos OS on MX Series configured for subscriber management / BBE allows an adjacent attacker to cause a crash by sending a specific username. This impacts authentication, authorization, and accounting A...
CVE-2021-1619
Cisco IOS XE Software contains an authentication bypass vulnerability in the AAA function (CVE-2021-1619). An unauthenticated, remote attacker could bypass NETCONF/RESTCONF authentication and, via a sequence of NETCONF/RESTCONF requests, install, manipulate, or delete device configurations or cau...
Cisco IOS XE Software NETCONF and RESTCONF Authentication Bypass Vulnerability
A vulnerability in the authentication, authorization, and accounting AAA function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass NETCONF or RESTCONF authentication and do either of the following: Install, manipulate, or delete the configuration of an affected...
CVE-2021-27793
CVE-2021-27793 affects Brocade Fabric OS TACACS+ login, causing intermittent authorization failures for users with valid accounts. Affected: FOS before 9.0.1b (and after 9.0.0) and before 8.2.3a (and after 8.2.0). Remediation: upgrade to 9.0.1b+ or 8.2.3a+ as indicated by advisories (BSA-2021-155...
How to Change Password for LDAP Authentication for NetScaler Gateway and AAA-TM Users
This article provides information on how LDAP password change can be achieved for NetScaler Gateway and AAA-TM users. Prerequisite NetScaler 10.1.x onwards...
Huawei Data Communication: Configuring Secure User Authentication Modes and Permission Levels
Configure user rights in the user-interface VTY view. In password authentication mode, this permission is the actual login permission. In AAA authentication mode, this parameter takes effect if no user rights are configured on the AAA server. Configuring password authentication on the VTY is...
Getting " Your account cannot be added using this server address" error when VPN Session policy is configured with CLASSIC EXPRESSION and bound under AAA User/Group
User tries to connect to Citrix Gateway Vserver from Citrix Workspace will be getting " Your account cannot be added using this server address" when VPN Session policy for Citrix Receiver is configured with CLASSIC EXPRESSION and bound under AAA User/Group a shown below. No issue occurs through W...
Traffic Management Logout Functionality on NetScaler
This article covers the Traffic Management TM logout functionality on NetScaler which is added in 10.0 and 9.3.e releases. The TM logout functionality triggers AAA session logout on traffic action hit. NetScaler can be configured for "Initiate Logout" option in the TM traffic profile. The followi...
aaa-lux-lighting.es Cross Site Scripting vulnerability OBB-1293851
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
aaa-lux-lighting.de Cross Site Scripting vulnerability OBB-1293817
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Cisco IOS XE Software AAA Login DoS (cisco-sa-20160928-aaados)
According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Authentication, Authorization, and Accounting AAA service for remote Secure Shell Host SSH connection. An unauthenticated, remote attacker can exploit this, by attempting to...
Error: “Cannot Complete Your Request” When Using Custom Portal Theme on AAA or Gateway VServer
Custom portal theme on AAA or Gateway VServer shows ‘Cannot complete your request’ error instead of the login page. When you click OK, you see the logon page and after your enter credential you can access your published resources. In-built theme works fine. When we create a new custom portal them...
Authorization Bypass
ovirt-engine-extension-aaa-jdbc is vulnerable to authorization bypass attacks. The vulnerability exists when updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. This would allow access to an attacke...
CVE-2017-2614
When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if it is expired. This would allow access to an attacker with access to change the password on accounts with expired passwords, gaining access to those account...
CVE-2017-2614
The CVE-2017-2614 issue affects ovirt-engine-extension-aaa-jdbc and the ovirt-aaa-jdbc-tool prior to 1.1.3. The root cause is that the tool fails to correctly verify the current password when it is expired during password updates in the rhvm database, allowing an attacker with access to change su...
FreeRADIUS Server Configuration Tool
Developed for the Linux operating system and written in the python programming language. The purpose of the program is to configure the FreeRADIUS server easily and quickly. To get a grasp of what FreeRADIUS is, it would help to firstly understand what the concept RADIUS stands for: RADIUS : RADI...
