PT-2023-8553 · Sudo +7 · Sudo +7

Name of the Vulnerable Software and Affected Versions: Sudo versions prior to 1.9.15 Description: The issue is related to the authentication procedure in Sudo, which might allow row hammer attacks for authentication bypass or privilege escalation. This is because the application logic sometimes...

PT-2023-22912 · Unknown · Phone/Messaging Storage Smr Sep-2023 Release 1

Name of the Vulnerable Software and Affected Versions: Phone and Messaging Storage SMR SEP-2023 Release 1 Description: The issue is related to improper authentication, allowing an attacker to insert arbitrary data into the provider. Recommendations: For Phone and Messaging Storage SMR SEP-2023...

PT-2023-22927 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 14.5.01.2 Description: The issue is related to improper authentication in the LocalProvider of Gallery, allowing an attacker to access data in the content provider. Recommendations: For versions prior to 14.5.01.2,...

Cannot complete your request error when using Azure AD saml authentication

SAML authentication policy for AG has been configured. The IDP is Azure AD. However, "Can not complete your request error" appeared when using AG SSO Storefront...

PT-2023-18341 · WordPress · Badgeos

Name of the Vulnerable Software and Affected Versions: BadgeOS plugin for WordPress versions up to, and including, 3.7.1.6 Description: The issue is due to improper validation and authorization checks within the badgeos delete step ajax handler, badgeos delete award step ajax handler, badgeos...

Rocky Linux 9 : cups (RLSA-2023:4838)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:4838 advisory. - An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. A...

AlmaLinux 8 : cups (ALSA-2023:4864)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4864 advisory. - An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An...

Oracle Linux 8 : cups (ELSA-2023-4864)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4864 advisory. 1:2.2.6-51.1 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : cups (ALSA-2023:4838)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:4838 advisory. - An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An...

Oracle Linux 9 : cups (ELSA-2023-4838)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4838 advisory. 1:2.3.3op2-16.1 - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation Tenable has extracted the preceding description block directly from...

RDP Error from ICA Session: "An authentication error has occurred (Code: 0x800706be)"

When we try to RDP inside an ICA session we get below error : Faulting application name: CredentialUIBroker.exe, version: 10.0.14393.4169, time stamp: 0x5ff78e7f Faulting module name: CtxWinlogonProv.dll, version: 0.0.0.0, time stamp: 0x5faeeb2d Exception code: 0xc0000005 Fault offset:...

PT-2023-26939 · Proself · Proself Mail Sanitize Edition +2

Name of the Vulnerable Software and Affected Versions: Proself Enterprise/Standard Edition versions 5.61 and earlier Proself Gateway Edition versions 1.62 and earlier Proself Mail Sanitize Edition versions 1.07 and earlier Description: The issue allows a remote unauthenticated attacker to log in ...

PT-2023-23799 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: Dell BIOS contains an improper authentication issue. A malicious user with physical access to the system may potentially exploit this to modify a security-critical UEFI variable without...

SUSE CVE-2023-32360

An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. An unauthenticated user may be able to access recently printed documents...

External Users Unable to Authenticate via Workspace App

External users unable to authenticate the workspace app after upgrading the firmware to 13.0 build 33.52 but they can login through the web browser. Error : While logging through the workspace by giving the credentials it will again loop back to the same login page by throwing an error : "Incorre...

CVE-2023-34196

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...

CVE-2023-34196

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...

Authentication flaw

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...

CVE-2023-34196

In the Keyfactor EJBCA before 8.0.0, the RA web certificate distribution servlet /ejbca/ra/cert allows partial denial of service due to an authentication issue. In configurations using OAuth, disclosure of CA certificates attributes and public keys to unauthenticated or less privileged users may...

CVE-2023-34196

Affected software: Keyfactor EJBCA prior to 8.0.0. Vulnerable component: RA web certificate distribution servlet at /ejbca/ra/cert. Root cause: authentication issue enabling partial denial of service. In OAuth configurations, CA certificates (attributes and public keys) may be disclosed to unauth...