CVE-2022-45168

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backupcode endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes...

UBUNTU-CVE-2024-28833

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

CVE-2024-28833

CVE-2024-28833 affects Checkmk 2.3 prior to 2.3.0p6, where excessive authentication attempts for two-factor authentication are not properly restricted, enabling brute-forcing of second factor mechanisms. The vulnerability is tied to the authentication flow and could impact confidentiality due to ...

CVE-2024-28833 Missing brute-force protection for two factor authentication

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

CVE-2024-28833 Missing brute-force protection for two factor authentication

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

CVE-2024-28833 Missing brute-force protection for two factor authentication

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

CVE-2024-28833

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

Bypassing 2FA with phishing and OTP bots

Introduction Two-factor authentication 2FA is a security feature we have come to expect as standard by 2024. Most of todays websites offer some form of it, and some of them wont even let you use their service until you enable 2FA. Individual countries have adopted laws that require certain types ...

CVE-2022-45168: Improper Authentication

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backupcode endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes...

PT-2024-22601 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3 through 2.3.0p5 Description: The issue is related to improper restriction of excessive authentication attempts with two factor authentication methods, which facilitates brute-forcing of second factor mechanisms...

Checkmk Security Vulnerabilities

Checkmk is an editor. A security vulnerability exists in versions prior to Checkmk 2.3.0p6 that stems from improperly limiting excessive authentication attempts for the two-factor authentication method, which can lead to brute force cracking...

CVE-2024-28833: Improper Restriction of Excessive Authentication Attempts

Improper restriction of excessive authentication attempts with two factor authentication methods in Checkmk 2.3 before 2.3.0p6 facilitates brute-forcing of second factor mechanisms...

CVE-2022-45168

LIVEBOX Collaboration vDesk (v018 and prior) is affected by CVE-2022-45168. The issue allows bypassing two-factor authentication by generating or regenerating backup codes at the endpoints /login/backup_code and /api/v1/vdeskintegration/createbackupcodes before the TOTP check is performed. Root c...

PT-2024-11688 · Unknown · Livebox Collaboration Vdesk

Name of the Vulnerable Software and Affected Versions: LIVEBOX Collaboration vDesk versions through v018 Description: An issue allows a Bypass of Two-Factor Authentication under the "/login/backup code" endpoint and the "/api/v1/vdeskintegration/createbackupcodes" endpoint. This occurs because th...

CVE-2022-45168

An issue was discovered in LIVEBOX Collaboration vDesk through v018. A Bypass of Two-Factor Authentication can occur under the /login/backupcode endpoint and the /api/v1/vdeskintegration/createbackupcodes endpoint, because the application allows a user to generate or regenerate the backup codes...

SecurEnvoy MFA Security Vulnerability

SecurEnvoy MFA is a multi-factor authentication solution from SecurEnvoy UK. A security vulnerability exists in SecurEnvoy MFA versions prior to 9.4.514 that stems from improper validation of user-supplied input...

LIVEBOX Collaboration vDesk Security Vulnerability

LIVEBOX Collaboration vDesk is an application from LIVEBOX, Inc. A security vulnerability exists in LIVEBOX Collaboration vDesk v018 and prior versions, which stems from the application allowing a user to generate or regenerate backup code prior to checking TOTP, where a two-factor authentication...

addr-detector (0.1.0), deeppavlov (>=0.0.5.1, <=0.0.5.3) +6 more potentially affected by CVE-2024-5206 via scikit-learn (0.19.0)

scikit-learn PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - addr-detector 0.1.0 - deeppavlov =0.0.5.1, =0.1.2, =1.0.1, =1.0.2 Source cves: CVE-2024-5206 Source advisory: OSV:GHSA-JW8X-6495-233V...

dostoevsky (>=0.1.0, <=0.1.2), factor-analyzer (0.3.0) +3 more potentially affected by CVE-2024-5206 via scikit-learn (0.20.1)

scikit-learn PYPI version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - dostoevsky =0.1.0, =0.3.2, =0.3.2, =0.3.3 Source cves: CVE-2024-5206 Source advisory: OSV:GHSA-JW8X-6495-233V...

dostoevsky (>=0.1.0, <=0.1.2), factor-analyzer (0.3.0) +3 more potentially affected by CVE-2024-5206 via scikit-learn (0.20.1)

scikit-learn PYPI version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - dostoevsky =0.1.0, =0.3.2, =0.3.2, =0.3.3 Source cves: CVE-2024-5206 Source advisory: OSV:PYSEC-2024-110...