2853 matches found
Authentication flaw
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...
DOKEOS SSO Authentication Bypass Vulnerability
Dokeos is an open source online education and course management system. A security vulnerability exists in DOKEOS. The vulnerability is caused by a variable type obfuscation error when comparing passwords to unserializable strings during authentication, SSO authentication is not possible...
The vulnerability of the Cisco Identity Services Engine, a platform for managing network policies, allows a hacker to gain administrator privileges.
The vulnerability of the Cisco Identity Services Engine, a platform for managing network policies, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain administrator privileges...
Authentication flaw
Ipswitch MOVEit DMZ before 8.2 provides different error messages for authentication attempts depending on whether the user account exists, which allows remote attackers to enumerate usernames via a series of SOAP requests to machine.aspx...
Authentication flaw
The lockscreen feature in Mozilla Firefox OS before 2.5 does not properly restrict failed authentication attempts, which makes it easier for physically proximate attackers to obtain access by entering many passcode guesses...
The vulnerability of the ScreenOS operating system, related to deficiencies in authentication procedures, allows a perpetrator to connect to the device with administrator privileges.
The vulnerability of the ScreenOS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain administrator privileges by entering a specially crafted password when connecting to the device via SSH ...
CG-WLBARGS does not properly perform authentication
Overview CG-WLBARGS provided by Corega Inc is a wireless LAN router. CG-WLBARGS does not properly perform authentication. Kousuke Kawahira of DWANGO Co.,Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...
ntp: authentication doesn't protect symmetric associations against DoS attacks
A denial of service flaw was found in the way NTP hosts that were peering with each other authenticated themselves before updating their internal state variables. An attacker could send packets to one peer host, which could cascade to other peers, and stop the synchronization process among the...
Apple OS X authentication issue when recovering from sleep mode
Overview Apple OS X contains an issue with authentication when recovering from sleep mode. This issue exists due to a flaw in the the processing of the text entered in the dialog box upon recovering from sleep mode. Masaki Katayama of Cyber Risks Laboratory Naviplus CO,Ltd. reported this...
Authentication flaw
The Login Disable module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly load the userlogout function, which allows remote attackers to bypass the logout protection mechanism by leveraging a contributed user authentication module, as demonstrated by the CAS and URL...
Authentication flaw
ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which might allow remote instance administrators to obtain sensitive credential and cookie information by reading authentication headers...
Authentication flaw
The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows remote attackers to read or write to files, or execute arbitrary JASIC code, via a session on TCP port 1239...
Authentication flaw
PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions via a comment in the query to api/json/admin/SubmitQuery, as demonstrated by "INSERT//INTO."...
Design/Logic Flaw
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration...
Authentication flaw
The readnetworkpacket function in ntpio.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a source IP address is an IPv6 loopback address, which makes it easier for remote attackers to spoof restricted packets, and read or write to the runtime state, by...
Authentication flaw
The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote...
Cisco Prime Collaboration Assurance Information Disclosure Vulnerability
Cisco Prime Collaboration Assurance is an enterprise collaboration network management solution. The solution supports simplified management of unified communications and video collaboration networks through a unified management console, as well as rapid deployment of communications sites. Cisco...
Cisco Content Security Management Appliance Security Bypass Vulnerability
The Cisco Content Security Management Appliance is a content security management appliance. The appliance is primarily used to manage all policies, reports, audit information, etc. for email and web security appliances. The Cisco Content Security Management Appliance fails to set authentication...
Authentication flaw
The HybridAuth Social Login module 7.x-2.x before 7.x-2.13 for Drupal allows remote attackers to bypass the user registration by administrator only configuration and create an account via a social login...