CVE-2025-43798

Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password TOTP to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user...

Missing Critical Step in Authentication

Overview Affected versions of this package are vulnerable to Missing Critical Step in Authentication during OTP validation. An attacker can gain unauthorized access by reusing a valid time-based one-time password within its validity period. Remediation Upgrade...

CVE-2025-43798

Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password TOTP to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user...

Liferay DXP 安全漏洞

Liferay DXP is a suite of digital experience collaboration platforms from Liferay USA. A security vulnerability exists in Liferay DXP that stems from a one-time password that is reusable within its validity period, which could lead to an attacker exploiting a user's one-time password for...

CVE-2025-2417 OTP Bypass in Akinsoft's e-Mutabakat

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass. This issue affects e-Mutabakat: from 2.02.06 before v2.02.06...

CVE-2025-2417 OTP Bypass in Akinsoft's e-Mutabakat

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass. This issue affects e-Mutabakat: from 2.02.06 before v2.02.06...

CVE-2025-2417

CVE-2025-2417 concerns an authentication bypass in Akinsoft e-Mutabakat due to an improper restriction of excessive authentication attempts. Affected software: Akinsoft e-Mutabakat prior to version 2.02.06 (i.e., 2.02.06 and earlier are implicated). The public records consistently describe the is...

CVE-2025-56689

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password OTP/Multifactor Authentication MFA bypass using response manipulation. An attacker who intercepts or captures a valid OTP response can bypass the OTP verification step by replaying th...

CVE-2025-56689

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password OTP/Multifactor Authentication MFA bypass using response manipulation. An attacker who intercepts or captures a valid OTP response can bypass the OTP verification step by replaying th...

CVE-2025-2416 OTP Bypass in Akinsoft's LimonDesk

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft LimonDesk allows Authentication Bypass. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

CVE-2025-2416

CVE-2025-2416 concerns an improper restriction of excessive authentication attempts in Akinsoft LimonDesk . Affects versions from s1.02.14 up to, but not including, v1.02.17. The root cause is an authentication mechanism that does not sufficiently limit repeated login attempts, enabling an authen...

CVE-2025-2415

CVE-2025-2415 affects Akinsoft MyRezzta: improper restriction of excessive authentication attempts can lead to an authentication bypass. Impact is described as high (CVSS 3.1 base 8.6). Affected versions are s2.03.01 up to before v2.05.01; remediation advised is to upgrade to version 2.05.01 or l...

CVE-2025-2415 OTP Bypass in Akinsoft's MyRezzta

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft MyRezzta allows Authentication Bypass. This issue affects MyRezzta: from s2.03.01 before v2.05.01...

CVE-2025-56689

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password OTP/Multifactor Authentication MFA bypass using response manipulation. An attacker who intercepts or captures a valid OTP response can bypass the OTP verification step by replaying th...

PT-2025-35801

Name of the Vulnerable Software and Affected Versions: Quest One Identity version 7.5.1.20903 Description: A crafted response manipulation can bypass the One-Time Password OTP on the Multi-Factor Authentication MFA page, leading to unauthorized access to the Privileged Access Management PAM porta...

CVE-2025-56689

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password OTP/Multifactor Authentication MFA bypass using response manipulation. An attacker who intercepts or captures a valid OTP response can bypass the OTP verification step by replaying th...

CVE-2025-2413 OTP Bypass in Akinsoft's ProKuafor

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor allows Authentication Bypass. This issue affects ProKuafor: from s1.02.08 before v1.02.08...

CVE-2025-2413

CVE-2025-2413 is linked to an improper restriction of excessive authentication attempts in Akinsoft ProKuafor, enabling an authentication bypass. The issue affects ProKuafor versions from s1.02.08 before v1.02.08. APT/mitigation notes in connected PT-Security记录 recommend updating to version 1.02....

CVE-2025-2413 OTP Bypass in Akinsoft's ProKuafor

Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft ProKuafor allows Authentication Bypass. This issue affects ProKuafor: from s1.02.08 before v1.02.08...

CVE-2025-2414

CVE-2025-2414 relates to an authentication bypass in Akinsoft OctoCloud caused by an improper restriction of excessive authentication attempts. Affected versions are s1.09.03 through 1.11.00, with the issue present prior to 1.11.01. The vulnerability could allow bypass of authentication without u...