340 matches found
PT-2020-10858 · Containous · Traefik
Name of the Vulnerable Software and Affected Versions: Traefik versions 2.x Description: The issue allows HTTPS sessions to proceed without mutual TLS verification in certain configurations, where an error should have occurred due to a bad SSL client authentication certificate. This situation can...
CVE-2019-18246
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure...
CVE-2019-18246
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure...
Authentication flaw
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure...
CVE-2019-18246
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure...
CVE-2019-18246
The connected sources confirm CVE-2019-18246 affects BIOTRONIK CardioMessenger II (home monitoring unit). The root issue is improper authentication with the BIOTRONIK Remote Communication infrastructure (CWE-287), enabling an attacker with adjacent access to interact with or intercept communicati...
PT-2020-9949
Name of the Vulnerable Software and Affected Versions BIOTRONIK CardioMessenger II affected versions not specified Description The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure. Recommendations At the moment, there is no...
CVE-2019-18246: Improper Authentication
BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure...
Improper Authentication in requests-kerberos
python-requests-Kerberos through 0.5 does not handle mutual authentication...
The vulnerability of the PRNG component of the FortiOS operating system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the PRNG component in the FortiOS operating system relates to the use of a weak entropy source during key generation. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information, when FortiOS acts as a client...
New LTE Network Flaw Could Let Attackers Impersonate 4G Mobile Users
A group of academics from Ruhr University Bochum and New York University Abu Dhabi have uncovered security flaws in 4G LTE and 5G networks that could potentially allow hackers to impersonate users on the network and even sign up for paid subscriptions on their behalf. The impersonation attack —...
CVE-2020-7956
HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3...
CVE-2014-8650
python-requests-Kerberos through 0.5 does not handle mutual authentication...
DEBIAN-CVE-2014-8650
python-requests-Kerberos through 0.5 does not handle mutual authentication...
Authentication flaw
python-requests-Kerberos through 0.5 does not handle mutual authentication...
PYSEC-2019-200
python-requests-Kerberos through 0.5 does not handle mutual authentication...
CVE-2014-8650
python-requests-Kerberos through 0.5 does not handle mutual authentication...
CVE-2014-8650
python-requests-Kerberos through 0.5 does not handle mutual authentication...
PT-2019-7147
Name of the Vulnerable Software and Affected Versions python-requests-Kerberos versions prior to 0.6 Description The issue concerns mutual authentication handling. Recommendations For versions prior to 0.6, update to version 0.6 or later to resolve the issue...