1155 matches found
CVE-2021-27990
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...
CVE-2021-27990
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...
CVE-2021-27990
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...
PT-2021-17704
Name of the Vulnerable Software and Affected Versions: Appspace version 6.2.4 Description: The issue concerns a broken authentication mechanism. This allows pages such as "/medianet/mail.aspx" to be accessed directly, exposing the framework's layouts, menus, and functionalities. Recommendations:...
CVE-2021-27990: Improper Authentication
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities...
CVE-2021-22497
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...
CVE-2021-22497
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...
Authentication flaw
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...
CVE-2021-22497
CVE-2021-22497 affects Advanced Authentication versions prior to 6.3 SP4 . The underlying issue is an improper session management that can lead to a potential broken authentication . According to the provided metrics, the CVSS v3.1 base score is 7.2 (HIGH) with a network attack vector and low att...
CVE-2021-22497: Improper Authentication
Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...
PT-2021-15106
Name of the Vulnerable Software and Affected Versions Advanced Authentication versions prior to 6.3 SP4 Description The issue is related to a potential broken authentication due to improper session management. This could allow unauthorized access. Recommendations For versions prior to 6.3 SP4,...
CVE-2021-28174
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...
CVE-2021-28174
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...
Authentication flaw
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...
CVE-2021-28174
Mitake smart stock selection system is affected by CVE-2021-28174, a broken authentication vulnerability where URL parameter manipulation lets remote attackers obtain privileged access to transaction records and perform fraudulent trading without login. The available documents describe the vulner...
CVE-2021-28174 Mitake Smart Stock Selection System - Broken Authentication
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...
CVE-2021-28174
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...
CVE-2021-28174: Improper Authentication
Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login...
CVE-2021-28171 Vangene deltaFlow E-platform - Broken Authentication
The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie...