Webauthn-Framework Authorization Issues Vulnerability

Webauthn-Framework is an authentication mechanism. It is used by Web applications to create and use strong, proven, scoped, public-key based credentials for strong authentication of users. An authorization issue vulnerability exists in Webauthn-Framework that stems from improper handling of...

CVE-2021-21337

Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality could redirect the browser to a differe...

CVE-2019-11650

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

CVE-2019-11650

CVE-2019-11650 concerns NetIQ Advanced Authentication Framework. The affected product is NetIQ Advanced Authentication Framework, with MITM vulnerability reported in versions prior to 6.0. The root cause and specifics beyond the affected version range aren’t detailed in the provided documents. Th...

CVE-2019-11650: Undefined Security Weakness

A potential Man in the Middle attack MITM was found in NetIQ Advanced Authentication Framework versions prior to 6.0...

PT-2019-12453

Name of the Vulnerable Software and Affected Versions NetIQ Advanced Authentication Framework versions prior to 6.0 Description A potential Man in the Middle attack was found. This issue could allow an attacker to intercept and alter communication between two parties. Recommendations For versions...

Resolve Username Being Modified Before Sending to RADIUS Server Using NetScaler nFactor

Introduction nFactor is the next generation authentication framework that offers great flexibility in configuring authentication flows for users. nFactor allows for extensible authentication models thus offering clean separation of workflows. This framework could be used to configure all the...

DEBIAN-CVE-2017-8422

KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and leveraging a privileged helper app...

DEBIAN-CVE-2013-1443

The authentication framework django.contrib.auth in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service CPU consumption via a long password which is then hashed...

Authentication flaw

The authentication framework django.contrib.auth in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service CPU consumption via a long password which is then hashed...

CVE-2013-1443

CVE-2013-1443 affects Django’s authentication framework (django.contrib.auth) across Django 1.4.x < 1.4.8, 1.5.x < 1.5.4, and 1.6.x

PT-2013-3139

Name of the Vulnerable Software and Affected Versions Django versions 1.4.x through 1.4.7 Django versions 1.5.x through 1.5.3 Django versions 1.6.x through 1.6 beta 3 Description The issue allows remote attackers to cause a denial of service by consuming CPU resources. This is achieved by providi...

FreeBSD : django -- multiple vulnerabilities (14a37474-1383-11e0-8a58-00215c6a37bb)

Django project reports : Today the Django team is issuing multiple releases -- Django 1.2.4, Django 1.1.3 and Django 1.3 beta 1 -- to remedy two security issues reported to us. All users of affected versions of Django are urged to upgrade immediately. Information leakage in Django administrative...

django -- multiple vulnerabilities

Django project reports: Today the Django team is issuing multiple releases -- Django 1.2.4, Django 1.1.3 and Django 1.3 beta 1 -- to remedy two security issues reported to us. All users of affected versions of Django are urged to upgrade immediately. Information leakage in Django administrative...

openSUSE 10 Security Update : CASA (CASA-1849)

Various bugs and problems were fixed in the CASA authentication framework, some of them security relevant : - Secrets with special characters inside were handled incorrectly. - Enhanced Salt generation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks i...