445 matches found
Moderate: Red Hat Security Advisory: sssd security and bug fix update
An update for sssd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
ALSA-2024:2571 Moderate: sssd security and bug fix update
The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...
Moderate: sssd security and bug fix update
The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...
sssd bug fix update
An update is available for sssd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The System Security Services Daemon SSSD service provides a set of daemons to...
The vulnerability of the Passkey Handler component in operating systems such as Apple iPadOS, MacOS, and iOS allows a hacker to disclose sensitive information that is protected by this component.
The vulnerability of the Passkey Handler component in Apple’s iPadOS, MacOS, and iOS operating systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
CVE-2023-42847
A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An attacker may be able to access passkeys without authentication...
CVE-2023-40401
The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.6.1. An attacker may be able to access passkeys without authentication...
PT-2023-6569 · Apple · Ios +2
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 iOS versions prior to 17.1 iPadOS versions prior to 17.1 Description: The issue is related to errors in authentication within the Passkey Handler component of Apple's operating systems. It may allow a remote...
Oracle Linux 8 : bluez (ELSA-2021-4432)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4432 advisory. 5.56-1 + bluez-5.56-1 - Fixing 1965057 - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56 Tenable has extracted the preceding...
SUSE CVE-2020-26558
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing in the Passkey authentication procedure by reflection of the public key and the authentication evidence of the initiati...
CVE-2022-45190
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device...
Design/Logic Flaw
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device...
PT-2023-14633
Name of the Vulnerable Software and Affected Versions Microchip RN4870 version 1.43 Description An issue was discovered in the Microchip RN4870 device, where an attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device. Recommendations For Microchip RN4870 versi...
CVE-2022-45190: Missing Authentication for Critical Function
An issue was discovered on Microchip RN4870 1.43 devices. An attacker within BLE radio range can bypass passkey entry in the legacy pairing of the device...
CVE-2022-45190
CVE-2022-45190 affects Microchip RN4870 devices (version 1.43). The issue allows an attacker within the BLE radio range to bypass the passkey entry in the legacy pairing process. The Red Hat, NVD, CNNVD, CVE authorities all describe the same vulnerability, with the attack surface centered on Blue...
CVE-2022-46400
The Microchip RN4870 module firmware 1.43 and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112 allows attackers to bypass passkey entry in legacy pairing...
CVE-2022-46400
The Microchip RN4870 module firmware 1.43 and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112 allows attackers to bypass passkey entry in legacy pairing...
Code injection
The Microchip RN4870 module firmware 1.43 and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112 allows attackers to bypass passkey entry in legacy pairing...
