CVE-2020-1812

HUAWEI P30 smartphones with versions earlier than 10.0.0.173C00E73R1P11 have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit...

CVE-2020-1812

CVE-2020-1812 affects Huawei P30 smartphones running versions earlier than 10.0.0.173 (C00E73R1P11). The issue is an improper authentication vulnerability caused by insufficient validation of certain applications, enabling an attacker to trick a user into installing a malicious app to bypass auth...

CVE-2019-14598

CVE-2019-14598 describes an Improper Authentication issue in Intel CSME subsystems that could allow a locally authenticated attacker to escalate privileges, cause denial of service, or disclose information. Affected firmware ranges include 12.x (12.0–12.0.48; IoT 12.0.56), 13.x (up to 13.0.20), a...

CVE-2013-3215

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function...

The vulnerability of the microprogrammed software of Huawei AP2000, Huawei AP4000, and Huawei AP4050DN-E lies in improper authentication, allowing attackers to execute arbitrary commands.

The vulnerability of the microprogrammed software of Huawei AP2000, Huawei AP4000, and Huawei AP4050DN-E wireless access points is related to improper authentication. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

CVE-2020-1788

Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...

CVE-2020-1788

Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...

Huawei Mate 20 Improper Authentication Vulnerability

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in previous versions of Huawei Mate 20 9.1.0.139 C00E133R3P1, which stems from a logic error that sometimes occurs in the system. An attacker can exploit the vulnerability with the help ...

CVE-2020-1787

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...

CVE-2020-1787

HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...

CVE-2019-6854

A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert ClearSCADA -with initial releases before 1 January 2019- which could cause a low privilege user to delete or modify database, setting or certificate files. Those users must have access to the...

CVE-2019-6854

A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert ClearSCADA -with initial releases before 1 January 2019- which could cause a low privilege user to delete or modify database, setting or certificate files. Those users must have access to the...

Authentication flaw

A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert ClearSCADA -with initial releases before 1 January 2019- which could cause a low privilege user to delete or modify database, setting or certificate files. Those users must have access to the...

CVE-2019-18572

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can...

CVE-2019-18572

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can...

Authentication flaw

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can...

CVE-2019-5252

There is an improper authentication vulnerability in Huawei smartphones Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro. The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant...

CVE-2019-5252

There is an improper authentication vulnerability in Huawei smartphones Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro. The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant...

CVE-2019-5253

E5572-855 with versions earlier than 8.0.1.3H335SP1C233 has an improper authentication vulnerability. The device does not perform a sufficient authentication when doing certain operations, successful exploit could allow an attacker to cause the device to reboot after launch a man in the middle...

Siemens SPPA-T3000 MS3000 Migration Server Improper Authentication Vulnerability (CNVD-2019-45376)

SPPA-T3000 is a distributed control system mainly used in thermal power plants and large-scale renewable energy power plants.MS3000 Migration Server is one of the migration servers. A security vulnerability exists in the Siemens SPPA-T3000 MS3000 Migration Server. An attacker with network access ...