Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 4:26 a.m.•20 views

CVE-2023-44039

In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker who can pass enrollment verifications and is allowed to enroll a FIDO key to register their FIDO authenticator to a victim’s account and consequently take over the account...

9.1CVSS7AI score0.00546EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/03 4:15 p.m.•21 views

CVE-2023-44039

In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker who can pass enrollment verifications and is allowed to enroll a FIDO key to register their FIDO authenticator to a victim’s account and consequently take over the account...

9.1CVSS6.6AI score0.00546EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/03 12:00 a.m.•16 views

CVE-2023-44039

In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker who can pass enrollment verifications and is allowed to enroll a FIDO key to register their FIDO authenticator to a victim’s account and consequently take over the account...

6.9AI score0.00546EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/03 12:00 a.m.•3 views

CVE-2023-44039: Improper Authentication

In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker who can pass enrollment verifications and is allowed to enroll a FIDO key to register their FIDO authenticator to a victim’s account and consequently take over the account...

9.1CVSS5.8AI score0.00546EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/03 12:00 a.m.•110 views

CVE-2023-44039

In VeridiumID versions prior to 3.5.0 , a vulnerability in the WebAuthn API allows an internal unauthenticated attacker to perform an account takeover. An attacker who can pass enrollment verifications and is permitted to enroll a FIDO key can register their own authenticator to a victim's accoun...

6.8AI score0.00546EPSS
SaveExploits0References2Affected Software1
The Hacker News
The Hacker News
•added 2022/12/12 2:24 p.m.•28 views

Google Adds Passkey Support to Chrome for Windows, macOS and Android

Google has officially begun rolling out support for passkeys, the next-generation passwordless login standard, to its stable version of Chrome web browser. "Passkeys are a significantly safer replacement for passwords and other phishable authentication factors," the tech giant's Ali Sarraf said...

2AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2022/10/12 2:23 p.m.•33 views

Google Rolling Out Passkey Passwordless Login Support to Android and Chrome

Google on Wednesday officially rolled out support for passkeys, the next-generation authentication standard, to both Android and Chrome. "Passkeys are a significantly safer replacement for passwords and other phishable authentication factors," the tech giant said. "They cannot be reused, don't le...

0.6AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2019/02/25 5:49 p.m.•113 views

Android Gets FIDO2 Certification—Now Supports Secure Passwordless Logins

Great news. If you have already installed the latest update of Google Play Services released earlier today, and your Android device is running Android version 7.0 Nougat or above—Congratulations! Your device is now FIDO2 Certified. Are you thinking… what the heck that actually means? It means,...

1.6AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2018/05/30 3:32 p.m.•38 views

Google Patches 34 Browser Bugs in Chrome 67, Adds Spectre Fixes

Google updated its Chrome browser to version 67.0.3396.62 on Tuesday patching 34 bugs and adding support for the credential management API called WebAuthn. The update will be available in the coming days for Windows, Mac and Linux platforms, Google said. Most notably to the browser update are...

6.8CVSS8.9AI score0.07666EPSS
SaveExploits6References8
Rows per page
Query Builder