Lucene search
+L

80 matches found

CVE
CVE
•added 2021/07/12 10:04 a.m.•79 views

CVE-2021-22515

NetIQ Advanced Authentication MFA can be bypassed, allowing single-factor authentication in versions prior to 6.3 SP4 Patch 1. The vulnerability affects the MFA flow and could enable unauthorized access when MFA is expected. Public advisories reference NetIQ’s release of updates in 6.3 SP4 Patch ...

6.5CVSS5.8AI score0.00685EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/07/12 10:04 a.m.•40 views

CVE-2021-22515 Multi-Factor Authentication (MFA) downgrade exposure in NetIQ Advanced Authentication Server

Multi-Factor Authentication MFA functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1...

4.8CVSS6.8AI score0.00685EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/12 12:00 a.m.•8 views

CVE-2021-22515: Incorrect Authorization

Multi-Factor Authentication MFA functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1...

6.5CVSS5.8AI score0.00685EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/12 12:00 a.m.•3 views

PT-2021-15118

Name of the Vulnerable Software and Affected Versions NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1 Description The issue allows the bypass of Multi-Factor Authentication MFA functionality, enabling the use of single factor authentication. Recommendations For versions prior to 6...

6.5CVSS0.00685EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/07/12 12:00 a.m.•21 views

NetIQ Advanced Authentication 安全漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a more secure way to protect your sensitive information by moving away from usernames and passwords. A security vulnerability exists in NetIQ Advanced Authentication that allows the use of single-factor authentication in...

6.5CVSS5.5AI score0.00685EPSS
SaveExploits0References2
NCSC
NCSC
•added 2021/07/12 12:00 a.m.•26 views

Vulnerability fixed in NetIQ Advanced Authentication

Micro Focus has fixed a vulnerability in NetIQ Advanced Authentication. The vulnerability allows a malicious party to bypass bypass multi-factor authentication. No substantive details about this vulnerability made publicly available. Micro Focus has released updates to fix the vulnerability fix i...

6.5CVSS6.9AI score0.00685EPSS
SaveExploits0
attackerkb
attackerkb
•added 2021/04/29 4:40 p.m.•11 views

CVE-2021-22515

Multi-Factor Authentication MFA functionality can be bypassed, allowing the use of single factor authentication in NetIQ Advanced Authentication versions prior to 6.3 SP4 Patch 1...

6.5CVSS6.6AI score0.00685EPSS
SaveExploits0References2
NVD
NVD
•added 2021/04/12 9:15 p.m.•32 views

CVE-2021-22497

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...

7.2CVSS0.00761EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/04/12 9:15 p.m.•20 views

CVE-2021-22497

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...

7.2CVSS5.8AI score0.00761EPSS
SaveExploits0References1
Prion
Prion
•added 2021/04/12 9:15 p.m.•28 views

Authentication flaw

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...

6.5CVSS7.1AI score0.00761EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/04/12 8:53 p.m.•85 views

CVE-2021-22497

CVE-2021-22497 affects Advanced Authentication versions prior to 6.3 SP4 . The underlying issue is an improper session management that can lead to a potential broken authentication . According to the provided metrics, the CVSS v3.1 base score is 7.2 (HIGH) with a network attack vector and low att...

7.2CVSS5.6AI score0.00761EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/12 8:53 p.m.•33 views

CVE-2021-22497 Advanced Authentication Improper Session Management

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...

3.8CVSS7.3AI score0.00761EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/12 12:00 a.m.•23 views

NetIQ Advanced Authentication 授权问题漏洞

NetIQ Advanced Authentication is an application from NetIQ UK. It provides a move away from usernames and passwords to a more secure way to protect your sensitive information. A security vulnerability previously existed in Advanced Authentication version 6.3 SP4, which stemmed from an improper...

7.2CVSS7.1AI score0.00761EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/12 12:00 a.m.•9 views

CVE-2021-22497: Improper Authentication

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...

7.2CVSS5.7AI score0.00761EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/04/09 12:00 a.m.•5 views

PT-2021-15106

Name of the Vulnerable Software and Affected Versions Advanced Authentication versions prior to 6.3 SP4 Description The issue is related to a potential broken authentication due to improper session management. This could allow unauthorized access. Recommendations For versions prior to 6.3 SP4,...

7.2CVSS0.00761EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2021/04/02 5:00 a.m.•12 views

CVE-2021-22497

Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue...

7.2CVSS7.1AI score0.00761EPSS
SaveExploits0References2
CNVD
CNVD
•added 2019/07/12 12:00 a.m.•18 views

Unspecified Vulnerability in Micro Focus NetIQ Advanced Authentication Framework

Micro Focus NetIQ Advanced Authentication Framework is a two-factor authentication framework from Micro Focus UK. An unspecified vulnerability exists in Micro Focus NetIQ Advanced Authentication Framework versions prior to 6.0. An attacker could exploit this vulnerability to conduct a...

5.9CVSS6.9AI score0.00819EPSS
SaveExploits0References1
CVE
CVE
•added 2019/07/10 6:02 p.m.•144 views

CVE-2019-11650

CVE-2019-11650 concerns NetIQ Advanced Authentication Framework. The affected product is NetIQ Advanced Authentication Framework, with MITM vulnerability reported in versions prior to 6.0. The root cause and specifics beyond the affected version range aren’t detailed in the provided documents. Th...

5.9CVSS5.7AI score0.00819EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/07/10 12:00 a.m.•5 views

PT-2019-12453

Name of the Vulnerable Software and Affected Versions NetIQ Advanced Authentication Framework versions prior to 6.0 Description A potential Man in the Middle attack was found. This issue could allow an attacker to intercept and alter communication between two parties. Recommendations For versions...

5.9CVSS0.00819EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/10 12:00 a.m.•6 views

CVE-2019-11650: Undefined Security Weakness

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

5.9CVSS5.6AI score0.00819EPSS
SaveExploits0References1
Rows per page
Query Builder