Design/Logic Flaw

Authentik is an open-source Identity Provider. There is a bug in our implementation of PKCE that allows an attacker to circumvent the protection that PKCE offers. PKCE adds the codechallenge parameter to the authorization request and adds the codeverifier parameter to the token request. Prior to...

PT-2019-16631

Name of the Vulnerable Software and Affected Versions McAfee Endpoint Security ENS versions prior to 10.6.1 May 2019 update Description A protection mechanism failure in the firewall allows context-dependent attackers to circumvent protection by manipulating GTI reputation, preventing the firewal...