CVE-2022-37017

CVE-2022-37017 Symantec Endpoint Protection 14.3.5351 클라이언트 사용자 인터페이스 비밀번호 인증 우회 Symantec Endpoint Protection은 UI에 비밀번호 보호 기능을 설정하여 구성 변경을 방지할 수 있습니다. 이 비밀번호 확인은 PPLProtected Process Light이나 커널 드라이버에 있지 않은 로직으로 구현되어 있습니다. 메모리의 반환 값을 변경하거나 바이너리를 패치하면 공격자가 비밀번호를 우회할 수 있습니다. 이 방법은 Tamper Protection이...

BIT-PARSE-2026-30949 Parse Server is missing audience validation in Keycloak authentication adapter

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2 and 8.6.18, the Keycloak authentication adapter does not validate the azp authorized party claim of Keycloak access tokens against the configured client-id. A valid access token...

CVE-2026-30949 Parse Server is missing audience validation in Keycloak authentication adapter

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.5 and 8.6.18, the Keycloak authentication adapter does not validate the azp authorized party claim of Keycloak access tokens against the configured client-id. A valid acces...

CVE-2026-30949 Parse Server is missing audience validation in Keycloak authentication adapter

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.5 and 8.6.18, the Keycloak authentication adapter does not validate the azp authorized party claim of Keycloak access tokens against the configured client-id. A valid acces...

CVE-2026-30949

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.5 and 8.6.18, the Keycloak authentication adapter does not validate the azp authorized party claim of Keycloak access tokens against the configured client-id. A valid acces...