Security Advisory - Improper Authentication Management Vulnerability in some Huawei Products

There is an improper authentication vulnerability in some huawei products.Successful exploitation of this vulnerability may lead to a control of the victim device. Vulnerability ID: HWPSIRT-2021-30580 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID:...

Open5GS 代码问题漏洞

Open5Gs is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial-of-service vulnerability exists in Open5GS version 2.3.6 and earlier, which stems from a null pointer reference in src/amf/namf-handler.c. The vulnerability is caused by a specially...

CVE-2021-32543

The CVE-2021-32543 issue affects the CTS Web transaction system (authentication management) from Cascade Information Technology, Taiwan. The root cause is an incorrect authentication implementation that allows a post-login attacker to manipulate cookies, access other accounts, and trade in the st...

Vmware VMWare SD-WAN Orchestrator Input Validation Error Vulnerability

Vmware VMWare SD-WAN Orchestrator is a software from Vmware that orchestrates network data flows in a software-defined network architecture. The software provides Web pages to visualize and manage users, gateways, and authentication. An input validation error vulnerability exists in VMware SD-WAN...

Perun Injection Vulnerability

Perun is an authentication and access management system. An injection vulnerability exists in versions prior to Perun 3.9.1. The vulnerability arises from a lack of proper validation of user input data by a network system or product during the course of a user's operation to enter a constructed...

Unspecified Vulnerability in Red Hat Keycloak

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat keycloak, which can be exploited by attackers to disclose information...

CVE-2018-0362

The CVE-2018-0362 entry describes a vulnerability in BIOS authentication management for Cisco 5000 Series Enterprise Network Compute System (ENCS) and Cisco UCS E-Series Servers. A local, unauthenticated attacker could bypass BIOS authentication by submitting an empty password to the BIOS prompt,...

CVE-2017-18067

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improper input validation while processing an encrypted authentication management frame in limsendauthmgmtframe leads to buffer overflow...

PT-2018-6023

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: A stack buffer overflow may potentially occur in Qualcomm products with Android releases from CAF using the Linux kernel when...

CVE-2017-15860: Access of Resource Using Incompatible Type

In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing an encrypted authentication management frame, a stack buffer overflow may potentially occur...

PT-2017-9992

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms versions 8.2121.0 through 8.3102.0 Description A vulnerability in login authentication management could allow an authenticated, local attacker to gain unrestricted root access to...

Solarwinds Orion Service SQL Injection

I found a couple SQL injection vulnerabilities in the core Orion service used in most of the Solarwinds products SAM, IPAM, NPM, NCM, etc…. This service provides a consistent configuration and authentication layer across the products. To be exact, the vulnerable applications and versions are:...

[SECURITY] Fedora 14 Update: sssd-1.3.0-30.fc14

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

Realm CMS <= 2.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Realm CMS = 2.3 Multiple Remote Vulnerabilities ================================================ AmnPardaz Security Research Team Title: Realm CMS Multiple Vulnerabilities Lead to Admin...