Authentication flaw

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

Authentication flaw

IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585...

UBUNTU-CVE-2023-36811

borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an...

BorgBackup 数据伪造问题漏洞

BorgBackup is an archiving program that performs deduplication through compression and encryption. A data forgery issue vulnerability exists in BorgBackup versions prior to 1.2.5, which stems from a flaw in the cryptographic authentication scheme in BorgBackup that allows an attacker to forge an...

PT-2023-25702 · Unknown +1 · Borgbackup +1

Name of the Vulnerable Software and Affected Versions: borgbackup versions prior to 1.2.5 Description: A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an...

Authentication flaw

ironic-image is a container image to run OpenStack Ironic as part of Metal³. Prior to version capm3-v1.4.3, if Ironic is not deployed with TLS and it does not have API and Conductor split into separate services, access to the API is not protected by any authentication. Ironic API is also listenin...

CVE-2020-11711

An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin panel. The resulting file is rendered on the authentication interface of the admin panel. It is possibl...

Authentication flaw

Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series a...

Rakuten WiFi Pocket 授权问题漏洞

The Rakuten WiFi Pocket is a wireless router from Rakuten Japan. A security vulnerability exists in Rakuten WiFi Pocket that stems from the presence of an incorrect authentication vulnerability that would allow a network-adjacent attacker to log in to the product's administration screen and...

Authentication flaw

Reachable Assertion vulnerability in upx before 4.0.0 allows attackers to cause a denial of service via crafted file passed to the the readx function...

Authentication flaw

An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the TSKEP authentication function...

Authentication flaw

An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via the authentication code for the UDP message...

CVE-2023-25913

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...

CVE-2023-25913

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...

Authentication flaw

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...

CVE-2023-25913

CVE-2023-25913 affects Danfoss AK-SM800A (system manager). The connected sources describe an authentication flaw that enables an attacker to generate a web report disclosing sensitive information such as internal IP addresses, usernames, store names, and other data. The NVD entry cites a CVSS v3....

PT-2023-20358 · Danfoss · Ak-Sm800A +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an authentication flaw that allows an attacker to generate a web report, potentially disclosing sensitive information such as...

The vulnerability of the web server of the application software interface for Moxa TN-5900 routers allows a hacker to increase their privileges.

The vulnerability of the web server of the application software interface for Moxa TN-5900 routers is related to errors during the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

Authentication flaw

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on EX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication an...

Authentication flaw

A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication an attacker is ab...