318 matches found
Grafana data representation web tool Authentication Bypass
The vulnerability of the Grafana data presentation web tool is related to authentication errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Open Build Service Authentication Bypass MITM
The vulnerability of the Open Build Service software platform is related to errors in verifying the authenticity of certificates. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and execute a type of “man-in-the-middle” attack...
Keycloak STARTTLS Privilege Escalation
The vulnerability of the STARTTLS component of the Keycloak identity and access management software is related to implementation errors in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...
Keycloak Privilege Escalation
The vulnerability of the Keycloak identity and access management software is related to errors in the implementation of authentication procedures. Exploiting this vulnerability can allow unauthorized actors to gain increased privileges...
SAP NetWeaver Keystore Disclosure
The vulnerability of the SAP NetWeaver software integration platform’s keystore service is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Remote Desktop Web Access Disclosure
The vulnerability of the Remote Desktop Web Access service in Windows operating systems with authentication processing errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information from a remote location...
SAP NetWeaver Process Integration Privilege Escalation
The vulnerability of the software for integrating SAP NetWeaver Process Integration corporate applications is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Huawei routers Authentication Error Privilege Escalation
The vulnerability of Huawei routers is related to authentication errors. Exploiting this vulnerability allows a hacker to execute arbitrary code and increase their privileges...
FortiOS Authentication Bypass
The vulnerability of the FortiOS operating system is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, while pretending to be an LDAP server...
D-Link DIR-600M WAN.htm Unauthorized Access Configuration
The vulnerability of the wan.htm component in D-Link DIR-600M N 150 Wi-Fi routers is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and modify configuration settings...
Websites Blob URL Chrome Unauthenticated Access
The vulnerability in the isolation functionality of websites, which arises when using Blob URLs and the Google Chrome browser, is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through...
Authentication Privilege Escalation
The vulnerabilities of Microprogramming Software: Intel Converged Security and Manageability Engine CSME, Intel Trusted Execution Engine TXE, and Intel Dynamic Application Loader DAL are related to authentication errors. Exploiting these vulnerabilities can allow attackers to enhance their...
Cisco Content Security Management Appliance Auth Bypass
The vulnerability of the software authentication module of the Cisco Content Security Management Appliance is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to spam messages from other users...
Junos OS Authentication Bypass
The vulnerability of the Junos OS router of the NFX Series is related to errors in the authentication process. Exploiting this vulnerability can allow an attacker to gain access to the Junos Device Manager JDM and gain full control over the system...
Cisco IOS XE Command Execution
The vulnerability of the Cisco IOS XE operating system’s command-line interface is related to authentication process errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the underlying operating system...
Cisco Integrated Management Controller Configuration Change
The vulnerability of the web interface for managing Cisco Integrated Management Controllers involves authentication errors. Exploiting this vulnerability allows an attacker to make unauthorized changes to the system configuration remotely...
Cisco ASA Privilege Escalation
The vulnerability of the Cisco Adaptive Security Appliance ASA network interface management web interface is related to authentication process errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges through specially crafted HTTP requests...
Role-Based Access Control RBAC Unauthorized Access
The vulnerability of the Role-Based Access Control RBAC implementation for the Etcd configuration store is related to authentication errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information by sending a request via the...
OpenLDAP Authentication Disclosure
The vulnerability of the OpenLDAP package is related to errors in the implementation of authentication procedures. Exploiting this vulnerability could allow attackers to disclose sensitive information that is protected by the system...
Cisco RV110W Wireless-N VPN Firewalls Device List Access
The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers is related to authentication process errors. Exploiting this vulnerability can allow an attacker to gain...