CVE-2017-7937

An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may be able to gain unauthorized access to the user firewall when RADIUS servers are unreachable...

How to Use NetScaler SNIP for Authentication (AAA) Server Communication

This article describes how to use NetScaler SNIP for authentication server communication. Background Authentication server communication on NetScaler is by default done using the NetScaler IPNSIP. So, apart from it being used for management purposes, it is also used as a source IPfor LDAP, RADIUS...

[FAQ] Netscaler LDAP uses which IP address as source

Netscaler LDAP uses which IP address as source, NSIP or SNIP Answer:- - nsldap.pl is a perl script and will use NSIP as source IP by default. - If the Netscaler has SNIP in the same subnet of the authentication server, Netscaler will communicatethrough SNIP. - And, if Netscaler and the...

Cisco Prime Infrastructure Elevation of Privilege Vulnerability

Cisco Prime Infrastructure is a wireless management solution through Cisco Prime LAN Management Solution and Cisco Prime Network Control System technologies. A security vulnerability exists in Cisco Prime Infrastructure, as the program stores case-sensitive usernames and performs case-sensitive...

CentOS 7 : krb5 (CESA-2015:0439)

Updated krb5 packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...

Juniper Networks Junos OS RADIUS Unintended Authentication Vulnerability (JSA10654)

Juniper Networks Junos OS is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Barracuda Web Security Flex 4.1 - Persistent Vulnerabilities

Document Title: =============== Barracuda Web Security Flex 4.1 - Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=750 BARRACUDA NETWORK SECURITY ID: BNSEC-699 Release Date: ============= 2014-08-22 Vulnerability Laboratory ID...

DS3 Authentication Server - Multiple Vulnerabilities

No description provided by source. Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt =============================== - Advisory - =============================== Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues Risk: High Date:...

CVE-2013-0300

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that 1 change the default view via the v parameter to apps/calendar/ajax/changeview.php, mount arbitrary 2 Google Drive or 3 Dropbox...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that 1 change the timezone for the user via the lat and lng parameters to...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that 1 change the default view via the v parameter to apps/calendar/ajax/changeview.php, mount arbitrary 2 Google Drive or 3 Dropbox...

Authentication flaw

VASCO IDENTIKEY Authentication Server IAS 3.4.x allows remote authenticated users to bypass Active Directory AD authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password...

CVE-2013-7292

CVE-2013-7292 affects VASCO IDENTIKEY Authentication Server (IAS) 3.4.x. An authenticated remote user can bypass Active Directory authentication by supplying only a DIGIPASS one-time password instead of the required OTP plus a multi-factor AD password. The available sources consistently describe ...

CVE-2013-7292: Improper Authentication

VASCO IDENTIKEY Authentication Server IAS 3.4.x allows remote authenticated users to bypass Active Directory AD authentication by entering only a DIGIPASS one-time password, instead of the intended combination of this one-time password and a multiple-time AD password...

VASCO IDENTIKEY Authentication Server contains an authentication bypass vulnerability

Overview VASCO IDENTIKEY Authentication Server version 3.4.x contains an authentication bypass vulnerability which could allow an attacker to login to a system without needing the user's Active Directory password credentials. Description CWE-305: Authentication Bypass by Primary WeaknessVASCO's...

CVE-2013-4096

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOSTNAME field...

Authentication flaw

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOSTNAME field...

Information disclosure

ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in a -REG-E-OPEN error message...

CVE-2013-4097

DS3 Authentication Server is affected by a information disclosure vulnerability. The issue occurs in ServerAdmin/TestDRConnection.jsp where remote attackers can obtain sensitive information via a direct request, revealing the installation path in a -REG-E-OPEN error message. The CVE record is cor...

CVE-2013-4096

The CVE-2013-4096 issue affects the DS3 Authentication Server’s ServerAdmin/TestTelnetConnection.jsp where remote authenticated users can execute arbitrary commands by injecting shell metacharacters into HOST_NAME. The NVD entry documents a high impact (CVSSv2 9.0, network access, no authenticati...