30 matches found
PT-2022-19679 · Misp · Misp
Name of the Vulnerable Software and Affected Versions: MISP versions prior to 2.4.158 Description: An issue was discovered in MISP, where there is stored XSS via the LinOTP login field. Recommendations: For versions prior to 2.4.158, update to version 2.4.158 or later to resolve the issue. As a...
KeyIdentity LinOTP Access Control Error Vulnerability
KeyIdentity LinOTP is the German company KeyIdentity is an open source two-factor authentication solution. The solution supports different authentication protocols, token types and user repositories. An access control error vulnerability exists in KeyIdentity LinOTP versions prior to 2.10.5.3. Th...
CVE-2019-12887
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control issue 1 of 2...
CVE-2019-12887
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control issue 1 of 2...
Improper access control
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control issue 1 of 2...
PYSEC-2019-33
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control issue 1 of 2...
PYSEC-2019-103
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control issue 1 of 2...
PYSEC-2019-103
KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control issue 1 of 2...
CVE-2019-12887
LinOTP (KeyIdentity LinOTP) before 2.10.5.3 has an Incorrect Access Control vulnerability (CVE-2019-12887). Affected product: KeyIdentity LinOTP. Root cause: insufficient access restrictions allowing unauthorized roles to access resources. Impact: confidentiality, integrity, and availability can ...
