Design/Logic Flaw

A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attacker to determine whether a subscriber username is valid. The vulnerability occurs because the Cisco Policy Suite RADIUS server component returns different authentication failure...

Odoo Database Backup Authentication Vulnerability

Odoo formerly known as OpenERP is an enterprise resource planning ERP and customer relationship management CRM system. The system is developed in Python language with PostgreSQL as the database and includes modules for sales management, inventory management and financial management. A security...

CVE-2018-5999

An issue was discovered in AsusWRT before 3.0.0.4.38410007. In the handlerequest function in router/httpd/httpd.c, processing of POST requests continues even if authentication fails...

K7 Antivirus Premium Information Disclosure Vulnerability

K7 Antivirus Premium is a suite of anti-virus software from K7 Computing India. A security vulnerability exists in versions of K7 Antivirus Premium prior to 15.1.0.53, which stems from a failure to adequately authenticate user input sent to the K7Sentry device. A local attacker could exploit the...

Disabling automatic password change for nonpersistent desktops

Computers use their machine account password for authentication with Active Directory. By default, computers are configured to change their machine account passwords every 30 days. This setting affects nonpersistent desktops in the following ways: 1. When you deploy the nonpersistent desktop, the...

Cookie Authentication Failed

This plugin is raised when the scanner has not been able to authenticate against the web application using the cookies provided in the scan policy. Check the output of the plugin to get an explanation of the issue encountered by the scan. No source data...

OpenMRS Remote Command Execution Vulnerability

OpenMRS Reference Application is a suite of open source EHR applications.Reporting Compatibility Add On is one of the compatibility reporting components. A remote command execution vulnerability exists in OpenMRS, which is caused by the application failing to authenticate the user when...

Authentication Failure When Password Contains £ Character

Authentication for 401 based failure is observed only oniOS devices ,when the password contains £ character, it works for Form based authentication. Authentication for 401 and Form based is working fine without any issue on Android devices ,when the password contains £ character. Coming to RADIUS...

XenMobile: Second Profile Installation Failed on iOS

Logs " 2017-09-05T16:09:55.988+0530 ",,ERROR 2,48-X1MDMEnrollFlowController createEnrollSessionblockinvoke,"request to create enrollment session unauthorized with 401",Active,com.apple.main-thread,403,Secure...

Multiple PDQ Products Privilege Acquisition Vulnerabilities

PDQ Manufacturing LaserWash G5 and others are automotive automatic cleaning equipment from PDQ Manufacturing, USA. web-server is one of the web servers. A security vulnerability exists in the web-server in several PDQ products due to the program failing to verify that the authentication informati...

Fedora 26 : php-symfony (2017-4fcbd8a4c3)

2.8.25 2017-07-17 - security 23507 Security validate empty passwords again xabbuh - bug 23526 HttpFoundation Set meta refresh time to 0 in RedirectResponse content jnvsor - bug 23540 Disable inlining deprecated services alekitto - bug 23468 DI Handle root namespace in service definitions ro0NL -...

CVE-2017-1258

IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 124685...

Palo Alto Networks Traps ESM Console Denial of Service Vulnerability

Palo Alto Networks Traps is a suite of endpoint protection suite software from Palo Alto Networks, U.S.A. ESM Console is one of the ESM consoles. A security vulnerability exists in ESM Console in Palo Alto Networks Traps prior to version 3.4.4, which stems from the program failing to properly...

CVE-2016-7055

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is...

April 11, 2017—KB4015547 (Security-only update)

None None...

Change of Expired LDAP Password on NetScaler During Log On Fails Intermittently

Changing the expired LDAP password at the time of user login via NetScaler Gateway due to password-expiry may fail and demonstrate itself on the login page as: "Incorrect credentials. Try again." or "Cannot connect. Try connecting again." ifEnhanced Authentication Feedback is enabled: At the time...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the OpenPAM component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an intruder, acting locally, to obtain confidential information due to a failed PAM authentication of the Sandbox application...

CVE-2016-9729

IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM Reference : 1999545...

Authentication fails on Secure Hub Error "Check the credentials and try again"

Authentication fails on Secure Hub. Cannot enroll devices...

Secure Web - Error: Cannot open the page - too many http redirections

After the NSG Session times out and the user attempts to start Secure Web, the following error message appears "Cannot open the page - too many http redirections " - then it disappears and a message "Check your credentials - Logon " appears. " 2016-11-11T08:02:45.345+0100 ",,INFO...