CVE-2024-1403 Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a failure to properly handle username and...

CVE-2024-1403 Authentication Bypass in OpenEdge Authentication Gateway and AdminServer

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a failure to properly handle username and...

CVE-2024-1403

CVE-2024-1403 affects Progress OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, and 12.8.1. The flaw is an authentication bypass caused by improper handling of credentials, where unexpected content can bypass authentication via the authorizeUser() flow that validates aga...

CVE-2024-1403: Authentication Bypass by Primary Weakness

In OpenEdge Authentication Gateway and AdminServer prior to 11.7.19, 12.2.14, 12.8.1 on all platforms supported by the OpenEdge product, an authentication bypass vulnerability has been identified. The vulnerability is a bypass to authentication based on a failure to properly handle username and...

Progress Software OpenEdge Authentication Gateway Security Vulnerability

Progress Software OpenEdge Authentication Gateway is a Progress Software for providing authentication services in OpenEdge environments. A security vulnerability exists in Progress Software OpenEdge Authentication Gateway that stems from the presence of an authentication bypass vulnerability...

PT-2024-2025

Name of the Vulnerable Software and Affected Versions: Progress OpenEdge Authentication Gateway versions prior to 11.7.19 Progress OpenEdge AdminServer versions prior to 11.7.19 Progress OpenEdge Authentication Gateway versions prior to 12.2.14 Progress OpenEdge AdminServer versions prior to...

PT-2023-16960 · Progress · Openedge Authentication Gateway +1

Name of the Vulnerable Software and Affected Versions: Weaver Xtreme Theme for WordPress versions up to and including 5.0.7 OpenEdge Authentication Gateway and AdminServer versions prior to 11.7.19, 12.2.14, and 12.8.1 Description: The issue concerns stored Cross-Site Scripting in the Weaver Xtre...

Security Bulletin: A Zookeeper Remote DoS vulnerability affects IBM BigInsights (CVE-2017-1213 )

Summary A security vulnerability has been identified in Open Source Zookeeper that affects IBM BigInsights IBM Open Platform with Apache Hadoop. Vulnerability Details CVEID: CVE-2017-1213 DESCRIPTION: IBM BigInsights Zookeeper when accessed behind a firewall where Jetty AdminServer is not...

Immunity Canvas: WEBLOGIC_T3_DESERIALIZATION

Name| weblogict3deserialization ---|--- CVE| CVE-2015-4852 Exploit Pack| CANVAS Description| weblogict3deserialization Notes| CVE Name: CVE-2015-4852 VENDOR: Oracle NOTES: IMPORTANT NOTE: Any instance of this application running Apache Commons Collections version prior to 3.0 WILL NOT WORK...

Kerio WebSTAR 5.4.2 (OSX) - libucache.dylib Local Privilege Escalation

Kerio WebSTAR 5.4.2 OSX - libucache.dylib Local Privilege Escalation !/usr/bin/perl http://www.digitalmunition.com written by kf kflistsatdigitalmunitiondotcom you must have access to the webstar user or be in the admin group This is currently not patched... chmod -s your kerio binaries foreach...