CVE-2023-49646

Improper authentication in some Zoom clients before version 5.16.5 may allow an authenticated user to conduct a denial of service via network access...

CVE-2023-44252

UNSUPPORTED WHEN ASSIGNED An improper authentication vulnerability CWE-287 in Fortinet FortiWAN version 5.2.0 through 5.2.1 and version 5.1.1 through 5.1.2 may allow an authenticated attacker to escalate his privileges via HTTP or HTTPs requests with crafted JWT token values...

CVE-2023-44252

Fortinet FortiWAN is affected by an improper authentication vulnerability (CWE-287) in versions 5.1.1–5.1.2 and 5.2.0–5.2.1. The issue arises from using a static key when handling JWT tokens, enabling an authenticated attacker to escalate privileges by sending crafted HTTP/HTTPS requests. Impact ...

CVE-2023-45801

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0...

Authentication flaw

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0...

CVE-2023-45801

CVE-2023-45801 affects Nadatel DVR devices, specifically versions 3.0.0 through 9.9.0. The root cause is improper authentication, which enables information elicitation (confidentiality impact). The vulnerability is network‑accessible with low attack complexity and no user interaction required, an...

Nadatel DVR Authorization Issues Vulnerability

Nadatel DVR is a series of hard disk recorders from the US company Nadatel. A security vulnerability exists in Nadatel DVR versions 3.0.0 through 9.9.0, which stems from an attacker being able to gain access to information through improper authentication...

PT-2023-31277 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 5.16.5 Description: The issue is related to improper authentication in some Zoom clients, which may allow an authenticated user to conduct a denial of service via network access. Recommendations: For versions prior to...

Improper Authentication

github.com/treeverse/lakefs is vulnerable to Improper Authentication. The vulnerability is due to the NewSecureString function in securestring.go lacking the security measures handle environment variables. Specifically, it directly accesses environment variables using os.LookupEnv without any for...

PT-2023-29695 · Unknown · Nadatel Dvr

Name of the Vulnerable Software and Affected Versions: Nadatel DVR versions 3.0.0 through 9.9.0 Description: The issue is related to an Improper Authentication vulnerability, which allows Information Elicitation. This vulnerability affects Nadatel DVR devices, potentially allowing unauthorized...

Authentication flaw

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...

CVE-2023-5970

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass...

CVE-2023-5970

CVE-2023-5970 affects SonicWall SMA100 SSL-VPN virtual office portal. The issue is improper authentication that lets a remote authenticated attacker create an identical external-domain user using accent characters, resulting in an MFA bypass. Affected devices include SMA100 and other SMA families...

CVE-2023-42575

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid flag setting...

CVE-2023-33070

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

CVE-2023-33070

CVE-2023-33070 describes a Transient DOS in Automotive OS caused by improper authentication to secure IO calls. Affected component: Automotive OS' secure IO interface; root cause is improper authentication enabling local access to IO calls, leading to availability impact (DoS). According to conne...

CVE-2023-33070 Improper Authentication in Automotive OS

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

CVE-2023-33054 Improper Authentication in GPS HLOS Driver

Cryptographic issue in GPS HLOS Driver while downloading Qualcomm GNSS assistance data...

CVE-2023-42576

Improper Authentication vulnerability in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication due to invalid exception handler...

CVE-2023-42575

Samsung Pass on mobile devices is impacted by CVE-2023-42575, affecting versions prior to 4.3.00.17. The issue is an improper authentication flaw caused by an invalid flag setting that allows physical attackers with direct device access to bypass authentication. Remediation requires updating to v...