PT-2017-6486

Name of the Vulnerable Software and Affected Versions TYPO3 extension "LDAP / SSO Authentication" ig ldap sso auth version 2.0.0 Description The issue is related to an Improper Authentication vulnerability in the "LDAP / SSO Authentication" extension for TYPO3. Recommendations For version 2.0.0 o...

CVE-2015-1401: Improper Authentication

Improper Authentication vulnerability in the "LDAP / SSO Authentication" igldapssoauth extension 2.0.0 for TYPO3...

GSA Bounty: Server Side Misconfiguration (EMAIL SPOOFING)

Hi team, Bug Type: Server Security Misconfiguration Mail Server Misconfiguration Missing SPF on Email Domain Weakness: Improper Authentication Description: i observe this when i send a email from [email protected] through http://emkei.cz/ to email [email protected] and afte...

CVE-2017-7934

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an...

CVE-2017-7930

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective...

CVE-2017-7934

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an...

CVE-2017-7934

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an...

CVE-2017-7934

CVE-2017-7934 concerns OSIsoft PI Server 2017 PI Data Archive prior to 2017, where PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and cause the PI Network Manager to behave in an undefined manner. The vulnerability ...

CVE-2014-7857: Improper Authentication

D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administrator permissions by passing the cgisetwto command in the c...

CVE-2015-3206: Improper Authentication

The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service bad response, or have other unspecified impact by performing a man-in-the-middle attack...

CVE-2017-7930: Improper Authentication

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to spoof a server within a collective...

CVE-2017-7934: Improper Authentication

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an...

PT-2017-18005

Name of the Vulnerable Software and Affected Versions OSIsoft PI Server 2017 PI Data Archive versions prior to 2017 Description An issue with improper authentication was found, which involves protocol flaws that could expose change records and allow a malicious party to spoof a server...

PT-2017-18007

Name of the Vulnerable Software and Affected Versions OSIsoft PI Server 2017 PI Data Archive versions prior to 2017 Description An issue with improper authentication was found, which could allow a malicious user to authenticate with a server. This flaw is related to the use of older protocol...

CVE-2015-8308: Improper Authentication

LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections...

CVE-2017-7557: Improper Authentication

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack...

CVE-2016-2102: Improper Authentication

HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network...

General Motors and Shanghai OnStar (SOS) iOS Client

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: General Motors GM, Shanghai OnStar SOS Equipment: SOS iOS Client Vulnerabilities: Cleartext Storage of Sensitive Information, Man-in-the-Middle, Improper Authentication REPOSTED INFORMATION This advisory was originall...

CVE-2015-4464: Improper Authentication

Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server...

PT-2017-2819

Name of the Vulnerable Software and Affected Versions Advantech WebAccess versions prior to V8.2 20170817 Description An issue with improper authentication was found, allowing specially crafted requests to bypass authentication, which could enable remote code execution. The vulnerability is relat...