Incorrect Failure Handling in RSA KEM RSASVE Encapsulation

...

Microsoft Azure uAMQP Security Vulnerability

Microsoft Azure uAMQP is a library from Microsoft Corporation USA. A security vulnerability exists in versions of Microsoft Azure uAMQP prior to 2023-2-07, which stems from a double release issue that could lead to an RCE when incorrect AMQPVALUE failure states are processed...

Session fixation

An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling during a password check allow attackers to bypass 2FA verification. Any plugin that tries to deny session creation after the store step does not deny an...

CVE-2023-28862

An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session ID generation in the AuthBasic handler and incorrect failure handling during a password check allow attackers to bypass 2FA verification. Any plugin that tries to deny session creation after the store step does not deny an...