Satellite: Allow unintended SCA certificate to authenticate Candlepin

The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...

CVE-2021-43116: Improper Authentication

An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login...

PT-2022-11396 · Red Hat +1 · Red Hat Satellite +1

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite affected versions not specified Description: The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate...

CVE-2022-28713

Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product...

CVE-2022-28713

Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product...

The vulnerability of the Wi-Fi router software WS7200-10, related to the improper implementation of authentication algorithms, allows attackers to circumvent existing security restrictions through brute-force attacks.

The vulnerability of the Wi-Fi router software WS7200-10 is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through brute-force attacks...

CVE-2022-28713: Improper Authentication

Improper authentication vulnerability in Scheduler of Cybozu Garoon 4.10.0 to 5.5.1 allows a remote attacker to obtain some data of Facility Information without logging in to the product...

PT-2022-19189 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.10.0 through 5.5.1 Description: The issue is related to improper authentication in the Scheduler component, allowing a remote attacker to access some Facility Information data without logging into the product...

The vulnerability in the web interface for controlling Cisco AppDynamics Controller allows a perpetrator to disclose sensitive information and enhance their privileges.

The vulnerability of the Cisco AppDynamics Controller’s software management web interface is related to improper authentication checks for HTTP requests. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information and enhance their privileges through a specially...

CVE-2022-2197: Improper Authentication

By using a specific credential string, an attacker with network access to the device’s web interface could circumvent the authentication scheme and perform administrative operations...

Exemys RME1

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Exemys Equipment: RME1 Vulnerability: Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with network access to bypass authentication and...

Oracle Linux 8 : curl (ELSA-2022-5313)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5313 advisory. - fix too eager reuse of TLS and SSH connections CVE-2022-27782 - fix credential leak on redirect CVE-2022-27774 - fix auth/cookie leak on redirect...

Oracle Linux 7 : 389-ds-base (ELSA-2022-5239)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5239 advisory. - Resolves: Bug 2077395 - CVE-2022-0918 389-ds:1.4/389-ds-base: sending crafted message could result in DoS Tenable has extracted the preceding...

CVE-2022-29578: Improper Authentication

Meridian Cooperative Utility Software versions 22.02 and 22.03 allows remote attackers to obtain sensitive information such as name, address, and daily energy usage...

CVE-2021-41638: Improper Authentication

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username...

CVE-2021-26638

Improper Authentication vulnerability in S&D smarthomesmartcare application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control...

Authentication flaw

Improper Authentication vulnerability in S&D smarthomesmartcare application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control...

CVE-2021-26638

Technical details for CVE-2021-26638 are not publicly available in the provided documents. Monitor for updates from linked sources before drawing conclusions about affected products, impact, or remediation.

CVE-2021-26637: Improper Authentication

There is no account authentication and permission check logic in the firmware and existing apps of SiHAS's SGW-300, ACM-300, GCM-300, so unauthorized users can remotely control the device...

CVE-2021-26638: Improper Authentication

Improper Authentication vulnerability in S&D smarthomesmartcare application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control...