Envoy Authentication Information Disclosure

The vulnerability of the network software tool Envoy is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

PDF Viewer Authentication Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to authentication process errors. Exploiting these vulnerabilities can allow a malicious actor to execute arbitrary code in the...

Magento Commerce Integration Component Authentication Bypass Unauthorized Access Data Deletion

The vulnerability of the integration component of the Magento Commerce software for online store development and management is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and delete customer data throug...

Inventory Component Magento Commerce Authentication Error

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores is related to authentication errors, which allow attackers to compromise the confidentiality and integrity of protected information using the HTTP network protocol...

integration component of the

The vulnerability of the integration component of the Magento Commerce software for developing and managing online stores is related to authentication errors. Exploiting this vulnerability allows a malicious actor to delete CMS pages through the REST API without authentication...

Inventory Component Magento Commerce Authentication Error

The vulnerability of the Inventory component in the Magento Commerce software platform for developing and managing online stores is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

TIBCO Managed File Transfer Platform File Transfer Modification

The vulnerability of the “file transfer” component of the TIBCO Managed File Transfer Platform Server is related to errors in the mechanism for processing authentication requests. Exploiting this vulnerability allows a malicious actor to modify arbitrary files remotely...

Microsoft Dynamics 365 Commerce Privilege Escalation

The vulnerability of the Microsoft Dynamics 365 Commerce e-commerce software relates to authentication errors. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Active Directory Federation Services Spoofing

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to carry out spear-phishing attacks remotely...

PT-2020-3916 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services ADFS affected versions not specified Description: An elevation of privilege issue exists due to improper handling of multi-factor authentication requests by Active Directory Federation Services ADFS. This...

CloudForms Management Engine Auth Bypass

The vulnerability of the CloudForms Management Engine software platform for managing virtual environments is related to authentication errors. Exploiting this vulnerability allows a malicious actor to create existing or new users for access control based on roles and groups...

vRealize Operations Authentication Bypass

The vulnerability of the monitoring tool for the vRealize Operations virtual infrastructure is related to authentication errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

MongoDB Authentication Unauthorized Access

The vulnerability of the document-oriented database management system MongoDB is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Cisco Small Business Smart Managed Switches Privilege Escalation

The vulnerability in the web interface for managing Cisco Small Business Smart and Managed Switch microprogramming software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

VMware Workspace One Auth Bypass

The vulnerability of VMware Workspace One software is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

update service for Cisco Code Execution

The vulnerability of the software update service for the Cisco Webex Meetings Desktop App on Mac operating systems is related to authentication errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created website...

docker-cli docker-engine security update

docker-cli 19.03.11-4 - added patch for registry list 19.03.11-3 - update to 19.03.11 for CVE-2020-13401 19.03.1-1.0.0 - update to 19.03.1 19.03-0.0.1 - update to 19.03 18.09.1-1.0.6 - disable kmem accounting for UEKR4 18.09.1-1.0.5 - apply e4931e664feac6fa8846f3f04268a0cc98822549, fixes...

Cisco Unified Contact Center Express DoS

The vulnerability of the Cisco Unified Contact Center Express operator automation software is related to authentication errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Twisted Jabber XMLStream MITM

The vulnerability of the words.protocols.jabber.xmlstream function in the Twisted networking framework is related to authentication errors. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” attack...

Cisco Adaptive Security Appliance Kerberos Protocol Data Compromise

The vulnerability of the Kerberos protocol implementation in Cisco Adaptive Security Appliance ASA microprogramming software is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...