Exploit for Improper Authentication in Fit2Cloud Jumpserver

BlackJump Chinese |...

CVE-2023-4562

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending...

CVE-2023-4562 Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending...

CVE-2023-4562

CVE-2023-4562 concerns Mitsubishi Electric MELSEC-F Series main modules. The vulnerability is described as an Improper Authentication flaw that may allow a remote, unauthenticated attacker to obtain sequence programs or write malicious data by sending illegitimate messages. Public details consist...

CVE-2023-4562: Improper Authentication

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending...

Mitsubishi Electric MELSEC-F Series

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Corporation Equipment : MELSEC-F Series Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability may allow a remote...

PT-2023-6278

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Corporation MELSEC-F Series main modules affected versions not specified Description The issue is related to an improper authentication vulnerability. This vulnerability allows a remote unauthenticated attacker to obtain...

CVE-2023-41261: Improper Authentication

An issue was discovered in /fcgi/scrutfcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the results...

CVE-2023-44096: Improper Authentication

Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality...

Dell EMC iDRAC9 4.40.00.00 < 4.40.10.00 (DSA-2021-082)

The version of Dell EMC iDRAC9 installed on the remote host is prior to 4.40.10.00. It is, therefore, affected by a vulnerability as referenced in the DSA-2021-082 advisory. - Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability....

CVE-2023-36724: Improper Authentication

Windows Power Management Service Information Disclosure Vulnerability...

CVE-2023-45246

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 36343, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...

CVE-2023-45246

The CVE-2023-45246 issue affects Acronis products: Cyber Protect Cloud Agent (Linux/macOS/Windows) before build 36343 and Cyber Protect 16 before build 39169. It stems from missing/improper authentication, enabling sensitive information disclosure and manipulation (confidentiality and integrity i...

Improper Authentication

asyncua is vulnerable to Improper Authentication. The vulnerability is due to a missing active session check, which lets an attacker access an Address Space without encryption and authentication allowing an attacker to steal sensitive data...

Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent Authorization Issues Vulnerability

Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent are both products of Acronis, Switzerland.Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise. Combining backup, anti-malware, network security and endpoint management features such as vulnerabili...

CVE-2023-20259

A vulnerability in an API endpoint of multiple Cisco Unified Communications Products could allow an unauthenticated, remote attacker to cause high CPU utilization, which could impact access to the web-based management interface and cause delays with call processing. This API is not used for devic...

CVE-2023-40376

IBM UrbanCode Deploy UCD 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X-Force ID: 263581...

CVE-2023-40376: Missing Authorization

IBM UrbanCode Deploy UCD 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X-Force ID: 263581...

PT-2023-27418

Name of the Vulnerable Software and Affected Versions IBM UrbanCode Deploy versions 7.1 through 7.1.2.12 IBM UrbanCode Deploy versions 7.2 through 7.2.3.5 IBM UrbanCode Deploy versions 7.3 through 7.3.2.0 Description The issue allows an authenticated user to make changes to environment variables...

CVE-2021-3784: Improper Authentication

Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating users from the 'Garuda settings manager', an insecure procedure is performed that keeps the created user without an assigned password during some seconds. This...