The vulnerability of the software solution that supports the closing, consolidation, and reporting processes of IBM Cognos Controller is related to deficiencies in the authentication process. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the software solution that supports the closing, consolidation, and reporting processes of IBM Cognos Controller is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity,...

The vulnerability of the cgi-bin/webupg component in D-Link DIR-825AC G1 router microprogramming software allows attackers to circumvent security restrictions.

The vulnerability of the cgi-bin/webupg component of D-Link DIR-825AC G1 microprogramming router software is related to authentication deficiencies when processing the autoupgrade.asp parameter. Exploiting this vulnerability allows a hacker to bypass security restrictions using a specially create...

PT-2022-3405 · Schedmd +3 · Slurm +3

Name of the Vulnerable Software and Affected Versions: SchedMD Slurm versions 20.11.x through 21.08.x Description: The issue is related to incorrect access control in the Slurm resource management system, which is associated with deficiencies in the authentication procedure. This can allow a remo...

tomcat: JNDI realm authentication weakness

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65...

The vulnerability of the Containerd execution environment, related to deficiencies in authentication procedures, allows attackers to disclose protected information.

The vulnerability of the Containerd runtime is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

The vulnerability of microprogrammed power supply systems of APC Smart-UPS models series SMT, SMC, SCL, SMX, SRT, SRTL is related to deficiencies in authentication procedures, allowing attackers to arbitrarily alter the behavior of the UPS.

The vulnerability of microprogrammed power supply systems from APC Smart-UPS models series SMT, SMC, SCL, SMX, SRT, and SRTL is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to arbitrarily alter the behavior of the U...

Code injection

GE UR IED firmware versions prior to version 8.1x supports upgrading firmware using UR Setup configuration tool – Enervista UR Setup. This UR Setup tool validates the authenticity and integrity of firmware file before uploading the UR IED. An illegitimate user could upgrade firmware without...

JetBrains TeamCity 授权问题漏洞

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Czech Republic. A security vulnerability exists in JetBrains TeamCity, which stems from the product's failure to validate user identities. An unauthenticated attacker could use the vulnerability to...

WordPress和WordPress plugin 访问控制错误漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress CMP plugin version 4.0.19 prior to the authorization problem vulnerability, the vulnerability stems from the...

The vulnerability of the software component responsible for creating, monitoring, and orchestrating data processing scripts in Airflow allows attackers to circumvent existing access restrictions and execute API requests without authentication.

The vulnerability of the software component responsible for creating, monitoring, and orchestrating data processing scripts in Airflow is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing access restrictions and execut...

PT-2022-2306 · Cisco · Cisco Small Business Rv260 +8

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, RV345P affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the web interface of the affected...

Jenkins Plugin 安全漏洞

Jenkins is a Jenkins open source application . An open source automation server Jenkins provides hundreds of plug-ins to support building, deploying and automating any project . Jenkins Publish Over SSH Plugin in 1.22 and earlier versions of the authorization problem vulnerability , the...

The vulnerability of the Jenkins automation server, related to deficiencies in the authentication mechanism, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Jenkins automation server is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to remotely influence the confidentiality, integrity, and accessibility of the protected information...

KONICA MINOLTA MFPs and printing systems 授权问题漏洞

KONICA MINOLTA MFPs and printing systems is a printer from KONICA MINOLTA. An authorization issue vulnerability exists in KONICA MINOLTA MFPs and printing systems, which arises from a lack of or insufficiently strong authentication measures in a networked system or product...

The vulnerability of the Application Framework module of the HarmonyOS operating system, which allows a hacker to trigger a service failure.

The vulnerability of the Application Framework module of the HarmonyOS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the mechanisms used by Cisco Webex Meetings Client software for web conference communications allows attackers to disclose protected information.

The vulnerability of the logging mechanisms in the Cisco Webex Meetings Client software arises from deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these mechanisms...

GOautodial 授权问题漏洞

GOautodial is a next-generation open source omnichannel contact center suite. Goautodial suffers from an authorization issue vulnerability that arises when the API in the software does not properly validate usernames and passwords, allowing callers to specify any value for a parameter and...

The vulnerability of the SD-WAN system “Bohatka,” related to deficiencies in authentication procedures, allows attackers to bypass the authentication mechanism.

The vulnerability of the SD-WAN system “Bohatka” is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication mechanism in the WebSocket component by using a forged access token...

tomcat: JNDI realm authentication weakness

A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.6.0 Security release

Red Hat JBoss Web Server 5.6.0 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, and Microsoft Windows. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which giv...