PT-2025-48145

Уязвимость компонента аутентификации программного комплекса для защиты платформ виртуализации vGate R2 связана с чрезмерным количеством неэффективных обращений к данным на стороне сервера. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...

Privilege escalation from low privilege administrator

...

PT-2024-22004 · Unknown · Eskooly Free Online School Management

Name of the Vulnerable Software and Affected Versions: Eskooly Free Online School management Software versions 3.0 and earlier Description: An issue in the User Account Management component of the authentication mechanism allows a remote attacker to escalate privileges. Recommendations: For...

Privilege Escalation

Amazon AWS Amplify CLI is vulnerable to Privilege Escalation. The vulnerability is due to the mishandling of role trust policies when the Authentication component is removed, leaving "Effect":"Allow" in place without conditions, thus exposing sts:AssumeRoleWithWebIdentity to potential misuse...

PT-2024-22240 · Amazon · Amazon Aws Amplify Cli

Name of the Vulnerable Software and Affected Versions: Amazon AWS Amplify CLI versions prior to 12.10.1 Description: The issue arises when the Authentication component is removed from an Amplify project, resulting in the removal of a Condition property but leaving "Effect":"Allow" present. This...

CVE-2024-28056

The Amazon AWS Amplify CLI before version 12.10.1 contains a vulnerability where incorrectly managed role trust policies can lead to unauthorized access. When an authorized user removes the Authentication component from an Amplify project, the CLI removes the Condition property but leaves the "Ef...

PT-2024-2841 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Authentication component of Windows operating systems. It is caused by incorrect link resolution before...

The vulnerability of the Windows Authentication component in Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Windows Authentication component in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2023-6944

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient input validation in the Windows Authentication component, which can be exploited to cause a denial of service. This allows an attacker to affect the syste...

PT-2023-3191 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Windows Authentication component in Windows operating systems and is associated with inadequate access control. It allows an attacker to elevate their privileges...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546

CVE-2022-45546 affects ScreenCheck BadgeMaker 2.6.2.0. The information disclosure occurs in the Authentication component, enabling an internal attacker to obtain authentication credentials via network sniffing. Public sources in the connected documents consistently describe credential exposure th...

CVE-2022-45546

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2022-45546: Cleartext Transmission of Sensitive Information

Information Disclosure in Authentication Component of ScreenCheck BadgeMaker 2.6.2.0 application allows internal attacker to obtain credentials for authentication via network sniffing...

CVE-2023-24574: Uncontrolled Resource Consumption

Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home...

PT-2023-1468

Name of the Vulnerable Software and Affected Versions Dell Enterprise SONiC OS versions 3.5.3, 4.0.0, 4.0.1, 4.0.2 Description The issue is related to an uncontrolled resource consumption vulnerability in the authentication component. This could allow an unauthenticated remote attacker to exploit...

PT-2022-27689 · Unknown · Opendaylight

Name of the Vulnerable Software and Affected Versions: OpenDaylight versions prior to 0.16.5 Description: A SQL injection issue was discovered in the AAA component of OpenDaylight. The deleteDomain function in DomainStore.java is affected, specifically for the "/auth/v1/domains/" API interface...

Oracle Linux 9 : dovecot (ELSA-2022-8208)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8208 advisory. 1:2.3.16-7.0.1 - do not run systemd commands during leapp upgrade Orabug: 34680501 1:2.3.16-7 - fix possible privilege escalation when similar master and...