PT-2019-5346

Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description The issue is related to insufficient authentication in the SPPA-T3000 Application Server, which can allow an attacker to access sensitive information. The...

PT-2019-5348

Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description A vulnerability has been identified that exposes directory listings and files containing sensitive information due to insufficient authentication. An attacker...

CVE-2019-5218

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band...

CVE-2019-5218

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band...

Authentication flaw

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band...

CVE-2019-5218

The CVE-2019-5218 issue affects Huawei Band 2 and Honor Band 3, with an insufficient authentication vulnerability that could allow a spoofed device to connect under certain scenarios. Root cause: inadequate authentication between the band and trying device. Impact stated: attacker could spoof and...

CVE-2019-5218

There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

CVE-2019-5213

Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321C00E320R1P1T8 have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of...

PT-2019-17506

Name of the Vulnerable Software and Affected Versions Honor Play smartphones versions earlier than 9.1.0.321C00E320R1P1T8 Description The issue is related to insufficient authentication, which is caused by a logic judge error under certain scenarios. This could allow an attacker to modify alarm...

PT-2019-4292

Name of the Vulnerable Software and Affected Versions Huawei Band 2 affected versions not specified Honor Band 3 affected versions not specified Description The issue is related to insufficient authentication in certain scenarios, allowing a remote attacker to potentially elevate their privileges...

Security Advisory - Insufficient Authentication Vulnerability in Several Band Products

There is an insufficient authentication vulnerability in several products. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof then connect to the band. Vulnerability ID: HWPSIRT-2019-09490 This...

CVE-2019-1877 Cisco Enterprise Chat and Email Attachment Download Vulnerability

A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could explo...

CVE-2019-1877: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could explo...

JetBrains Hub Authorization Issues Vulnerability

JetBrains Hub is a web-based application from the Czech company JetBrains. The program is capable of integrating multiple JetBrains team tools together. An authorization issue vulnerability exists in versions of JetBrains Hub prior to 2018.4.11436. The vulnerability stems from a lack of...

Windows NTLM Authentication Bypass

The vulnerability in the implementation of the NTLM protocol in Windows operating systems is related to insufficient authentication checks for NTLM packets during their processing. Exploiting this vulnerability allows an attacker to compromise the security functions of the NTLM Message Integrity...

Security Advisory - Insufficient Authentication Vulnerability in Several Smartphones

There is an insufficient authentication vulnerability on several smartphones. The system has a logic judge error under certain scenario. Successful exploit could allow the attacker to modify the alarm clock settings after a serious of uncommon operations without unlock the screen lock...

PT-2019-3515 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient authentication in Windows operating systems, allowing an attacker to potentially elevate their privileges by running a specially crafted...

PT-2019-3513

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient authentication in Windows operating systems, which can be exploited by running a specially crafted application, allowing an attacker to elevate their...