182 matches found
CVE-2022-1984
This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access WFA before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload...
CVE-2022-3258
Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse...
CVE-2025-2102
Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...
CVE-2025-2102
CVE-2025-2102 is an improper Link Resolution Before File Access (Link Following) vulnerability in HYPR Passwordless for Windows, affecting versions prior to 10.1. The issue creates local privilege escalation when a high-privilege user can trigger link-following before file access, with a CVSS 4.0...
CVE-2025-2102
Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...
CVE-2025-2102
Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...
CVE-2025-0372
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...
CVE-2025-0372
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...
CVE-2025-0372
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...
CVE-2025-0372
CVE-2025-0372 describes a race condition in HYPR Passwordless on Windows caused by improper synchronization when using shared resources. The vulnerability affects HYPR Passwordless versions before 10.1 and enables privilege escalation with a local attack vector. The CVSS data indicates low confid...
CVE-2025-0372: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...
CVE-2025-2102: Improper Link Resolution Before File Access
Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1...
PT-2025-22401 · Hypr · Hypr Passwordless
Name of the Vulnerable Software and Affected Versions: HYPR Passwordless versions prior to 10.1 Description: The issue is related to an Improper Link Resolution Before File Access, also known as 'Link Following', which allows Privilege Escalation in HYPR Passwordless on Windows. Recommendations:...
HYPR Passwordless 安全漏洞
HYPR Passwordless is an identity security solution from HYPR. A security vulnerability exists in HYPR Passwordless versions prior to 10.1, which stems from improper link resolution prior to file access and could lead to elevation of privilege...
HYPR Passwordless 安全漏洞
HYPR Passwordless is an identity security solution from HYPR. A security vulnerability exists in HYPR Passwordless versions prior to 10.1 that stems from improper synchronization of shared resources resulting in a competitive condition that could lead to elevated privileges...
PT-2025-22400 · Hypr · Hypr Passwordless
Name of the Vulnerable Software and Affected Versions: HYPR Passwordless versions prior to 10.1 Description: The issue is related to a 'Race Condition' vulnerability due to improper synchronization when using shared resources, allowing privilege escalation. This vulnerability affects HYPR...
CVE-2022-2193
Insecure Direct Object Reference vulnerability in HYPR Server before version 6.14.1 allows remote authenticated attackers to add a FIDO2 authenticator to arbitrary accounts via parameter tampering in the Device Manager page. This issue affects: HYPR Server versions prior to 6.14.1...
CVE-2022-2192
Forced Browsing vulnerability in HYPR Server version 6.10 to 6.15.1 allows remote attackers with a valid one-time recovery token to elevate privileges via path tampering in the Magic Link page. This issue affects: HYPR Server versions later than 6.10; version 6.15.1 and prior versions...