VulnCheck KEV: CVE-2023-30869

Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1...

CVE-2023-1477

The CVE-2023-1477 entry concerns the HYPR Keycloak Authenticator Extension, where an Improper Authentication flaw enables Authentication Abuse. Affected components are HYPR Keycloak Authenticator Extension prior to versions 7.10.2 and 8.0.3. Root cause: insufficient/authentication bypass risk in ...

CVE-2023-1477

Improper Authentication vulnerability in HYPR Keycloak Authenticator Extension allows Authentication Abuse.This issue affects HYPR Keycloak Authenticator Extension: before 7.10.2, before 8.0.3...

PT-2023-17014 · Hypr · Hypr Keycloak Authenticator Extension

Name of the Vulnerable Software and Affected Versions: HYPR Keycloak Authenticator Extension versions prior to 7.10.2 HYPR Keycloak Authenticator Extension versions prior to 8.0.3 Description: The issue is related to an Improper Authentication vulnerability in the HYPR Keycloak Authenticator...

CVE-2021-27668

A flaw was found in HashiCorp Vault Enterprise. This flaw allows a remote attacker to obtain sensitive information caused by improper authentication validation by the /sys/license endpoint. By sending a specially-crafted HTTP request, an attacker can obtain license metadata from DR secondaries an...

Juniper Junos OS Multiple Vulnerabilities (JSA70587)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA70587 advisory. - An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based...

Improper Authentication

org.apache.dolphinscheduler:dolphinscheduler-api is vulnerable to Improper Authentication. The vulnerability allows an attacker to bypass authentication mechanisms to gain access and perform unauthorized actions...

Ivanti Avalanche InfoRail Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. User interaction is required to exploit this vulnerability. The specific flaw exists within the InfoRail service. The issue results from improper authentication. An attacker can...

GHSA-3JXW-CV35-2MMV Apache DolphinScheduler's python gateway suffered from improper authentication

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the...

CVE-2023-25601 Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the...

CVE-2023-25601 Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the...

PaperCut NG 授权问题漏洞

PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. An authorization issue vulnerability exists in PaperCut NG version 22.0.5 that stems from improper authentication and can be exploited by an attacker to bypass authentication on the system...

ABB M2M ETHERNET Improper Authentication (CVE-2018-17926)

The product M2M ETHERNET FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

CVE-2023-25556

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation...

Authentication flaw

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation...

CVE-2023-25556

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation...

CVE-2023-25556

CVE-2023-25556 describes an improper authentication weakness in KNX-based devices where a key of fewer than seven digits can compromise a device if an attacker has KNX access. Connected sources tie this to Schneider Electric StruxureWare/KNX implementations and Merten KNX, noting the root cause a...

CVE-2023-25556

A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the attacker has access to the KNX installation...

CVE-2023-28963

An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...

CVE-2023-28962

An Improper Authentication vulnerability in upload-file.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to upload arbitrary files to temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...