1880 matches found
CVE-2024-20301
Cisco Duo Authentication for Windows Logon and RDP is affected by an authentication bypass vulnerability. The issue stems from failure to invalidate locally created trusted sessions after reboot, allowing an authenticated, physical attacker to bypass secondary authentication and access the Window...
CVE-2024-20301
A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...
Cisco Duo Authentication for Windows Logon and RDP Authentication Bypass Vulnerability
A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...
PVS- 2203 CU2 || slow performance in Windows
Customer is seeing slow Windows logon and Windows is very sluggish after logon...
FAS not working - FAS Event 104 on VDA
FAS not working, event 104 generated on VDA: S104 Identity Assertion Logon failed. Failed to connect to Federated Authentication Service: UserCredentialService Address: fas.domainIndex: 0 Error: The caller was not authenticated by the service. Server stack trace: at...
OpenJDK: logging of digital signature private keys (8316976)
Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks o...
CVE-2024-20946
Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...
PT-2024-1250 · Oracle · Oracle Solaris
Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient input validation in the kernel of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris. Successful...
PT-2024-1189 · Oracle · Oracle Solaris
Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient input validation in the Filesystem component of Oracle Solaris. This easily exploitable vulnerability allows a low-privileged attacker with logon access to the...
SSO logon to Director fail via Edge/Chrome/Firefox
SSO logon to Director fail when accessing from outside of Director server computer via Edge/Chrome/Firefox. IE or IE mode works fine and any browser on Director server works fine User get "An internal error has occurred" error even if credential is manually input...
OpenSC: Potential PIN bypass when card tracks its own login state
A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses a security risk, particularly for OS logon/screen unlock a...
Cisco Duo Authentication For Windows Logon And RDP Installed (Windows)
Binary data ciscoduowinlogoninstalled.nbin...
Published applications or desktops not showing after logon to CWA
Published Applications or Desktops are not showing after logon Citrix Workspace app CWA. This issue happens for some specific users only...
Kerberos Ticket Management
Manage kerberos tickets on a compromised host. Module Options msf use post/windows/manage/kerberostickets msf postkerberostickets show actions ...actions... msf postkerberostickets set ACTION msf postkerberostickets show options ...show and set options... msf postkerberostickets run This module...
PT-2023-9074 · Oracle · Oracle Solaris
Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient input validation in the Zones component of Oracle Solaris, allowing a high-privileged attacker with logon to the infrastructure to compromise Oracle Solaris. Successf...
Teams - Error "Your Admin has restricted Access to the New Teams" in ICA session
When launching New Teams within Remote PC / ICA session, it seems to logon fine the first time. But when the user logs out and logs back in again to Teams the second time and any subsequent attempt, they see the following error message: "Your Admin has restricted Access to the New Teams"...
Can't complete your request with SAML enabled in a Single Domain
Can't complete your request when logon Netscaler Gateway using UPN name with SAML enabled. On Storefront event log, we can see "An authentication attempt was made for user: [email protected] with realm context resulting in: Failed -1073741715" In Storefront Verbose log, we can see...
SAP NetWeaver AS Java Multiple Vulnerabilities (November 2023)
SAP NetWeaver Application Server for Java is affected by multiple vulnerabilities, as disclosed in the November SAP Security Patch Day advisory, including the following: - SAP NetWeaver AS Java GRMG Heartbeat application version 7.50 allows an unauthenticated attacker to send a crafted request fr...
CVE-2023-42480
The unauthenticated attacker in NetWeaver AS Java Logon application - version 7.50, can brute force the login functionality to identify the legitimate user ids. This will have an impact on confidentiality but there is no other impact on integrity or availability...
CVE-2023-42480
The CVE-2023-42480 issue affects SAP NetWeaver AS Java Logon (version 7.50). An unauthenticated attacker can brute-force the login function to enumerate legitimate user IDs, resulting in confidentiality impact (user ID disclosure) with no reported impact on integrity or availability. Multiple con...