CVE-2024-12838

The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the identity of any user, including administrators...

CVE-2024-12838

creationtimestamp| type| source ---|---|--- 2024-12-31 01:36:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113744869181833797 2024-12-31 03:40:09+00:00| seen| https://t.me/cvedetector/13969...

CVE-2024-12838 Changing Information Technology CGFIDO - Authentication Bypass

The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the identity of any user, including administrators...

CVE-2024-12838 Changing Information Technology CGFIDO - Authentication Bypass

The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the identity of any user, including administrators...

CVE-2024-12838

CVE-2024-12838 affects CGFIDO (passwordless login) from Changing Information Technology. The vulnerability is an Authentication Bypass in the passwordless login mechanism, enabling remote attackers with regular privileges to send a crafted request and switch to the identity of any user, including...