Lucene search
+L

6 matches found

NVD
NVD
•added 2024/12/31 2:15 a.m.•33 views

CVE-2024-12839

The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed on their device will send an authentication signature to the website. An unauthenticated remote...

8.8CVSS0.00721EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/12/31 1:32 a.m.•11 views

CVE-2024-12839 Changing Information Technology CGFIDO - Authentication Bypass

The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed on their device will send an authentication signature to the website. An unauthenticated remote...

8.8CVSS7.8AI score0.00721EPSS
SaveExploits0References2
CVE
CVE
•added 2024/12/31 1:32 a.m.•83 views

CVE-2024-12839

CVE-2024-12839 affects CGFIDO by Changing Information Technology. The login uses a device authentication signature; an unauthenticated remote attacker who obtains this signature can log in with any device after visiting a forged site, constituting an authentication bypass. Connected sources menti...

8.8CVSS7.8AI score0.00721EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/12/31 1:32 a.m.•37 views

CVE-2024-12839 Changing Information Technology CGFIDO - Authentication Bypass

The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed on their device will send an authentication signature to the website. An unauthenticated remote...

8.8CVSS0.00721EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•7 views

CVE-2024-12839: Authentication Bypass by Capture-replay

The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed on their device will send an authentication signature to the website. An unauthenticated remote...

8.8CVSS7.9AI score0.00721EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/29 12:00 a.m.•42 views

IBM Security Directory Server Input Validation Error Vulnerability

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. An input validation error vulnerability exists in IBM Securit...

8.2CVSS6.3AI score0.01288EPSS
SaveExploits0References1
Rows per page
Query Builder