44 matches found
CVE-2024-0311
CVE-2024-0311 affects Skyhigh Client Proxy on Windows, where a malicious insider can bypass the product’s policy without a valid release code. Connected sources describe a bypass via a named pipe MCPTrayPipe0 (CreateNamedPipeW) and related access-control weaknesses, enabling abuse of SCPBypass.ex...
CVE-2024-0311
A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code...
Skyhigh Client Proxy Security Vulnerability
Skyhigh Client Proxy is a client-side proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from an existing policy that allows an attacker to bypass the proxy...
PT-2024-15461 · Mcafee · Skyhigh Client Proxy
Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. Recommendations: At the moment, there is no information about a newer...
Skyhigh Client Proxy Security Vulnerability
Skyhigh Client Proxy is a client proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from a vulnerability that allows an attacker to uninstall the proxy without a valid uninstall password...
Skyhigh Client Proxy Security Vulnerability
Skyhigh Client Proxy is a client proxy from Skyhigh. A security vulnerability exists in Skyhigh Client Proxy 4.8.1 and earlier versions, which stems from the presence of a control flow implementation error issue that allows an attacker to circumvent existing security controls...
PT-2024-15462 · Mcafee · Skyhigh Client Proxy
Name of the Vulnerable Software and Affected Versions: Skyhigh Client Proxy affected versions not specified Description: A malicious insider can uninstall Skyhigh Client Proxy without a valid uninstall password. Recommendations: At the moment, there is no information about a newer version that...
CVE-2022-36774
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575...
CVE-2022-36774
IBM Robotic Process Automation (IBM RPA) is affected by CVE-2022-36774 for versions
The vulnerability of the McAfee Client Proxy software lies in its ability to bypass authentication by using a user-controlled password. This allows attackers to circumvent web traffic scanning and gain access to blocked websites.
The vulnerability of the McAfee Client Proxy software relates to the bypassing of authentication procedures by using a key controlled by the user. Exploiting this vulnerability allows an attacker to bypass web traffic scanning and gain access to blocked websites for a short period of time. This i...
Arbitrary Code Execution
odata-client-proxy is vulnerable to arbitrary code execution. The vulnerability exists as the classes that were deserialized were not checked in AbstractService, allowing unsafe deserialization that can lead to arbitrary code execution...
McAfee Client Proxy Authentication Bypass Vulnerability
McAfee Client Proxy MCP is a client proxy program in the McAfee Web Protection web security solution from McAfee, Inc. An authentication bypass vulnerability exists in McAfee MCP versions prior to 3.0.0 Windows. An attacker could exploit this vulnerability to bypass network traffic scans and acce...
CVE-2019-3654
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...
CVE-2019-3654
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...
Authentication flaw
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...
CVE-2019-3654
McAfee Client Proxy (MCP) for Windows is affected by an authentication bypass vulnerability prior to version 3.0.0. The issue allows a local user to bypass the normal authentication mechanism and generate an authorization key on the client that should only be created by the network administrator,...
CVE-2019-3654 Client Proxy (MCP) - Authentication Bypass vulnerability
Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy MCP prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating an authorization key on the client which should only be...
McAfee Client Proxy CVE-2019-3654 Local Authentication Bypass Vulnerability
Description McAfee Client Proxy is prone to a local authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism. This may aid in further attacks. McAfee Client Proxy MCP versions prior to 3.0.0 are vulnerable. Technologies Affected McAfee Client...
GHSA-5XC6-FPC7-4QVG CoAPthon DoS due to Exceptions
The Serialize.deserialize method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client when they receive...
Symantec Multiple Products Client Proxy ActiveX (CLIproxy.dll) Remote Overflow
No description provided by source. source: http://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote...