CVE-2023-43045 IBM Sterling Partner Engagement Manager security bypass

IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 could allow a remote user to perform unauthorized actions due to improper authentication. IBM X-Force ID: 266896...

PT-2023-28673 · Ibm · Ibm Sterling Partner Engagement Manager

Name of the Vulnerable Software and Affected Versions: IBM Sterling Partner Engagement Manager versions 6.1.2, 6.2.0, and 6.2.2 Description: The issue is related to improper authentication, which could allow a remote user to perform unauthorized actions. Recommendations: For versions 6.1.2, 6.2.0...

CVE-2023-38735 IBM Cognos Dashboards improper authentication

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 262482...

Exploit for Improper Authentication in Fit2Cloud Jumpserver

CVE-2023-42442 CVE-2023-42442 – JumpServer Session recording...

CVE-2023-41089

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests...

Authentication flaw

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests...

CVE-2023-41089 Improper Authentication in DEXMA DEXGate

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests...

CVE-2023-41089 Improper Authentication in DEXMA DEXGate

The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie header to generate "legitimate" requests...

DEXMA DexGate Authorization Issues Vulnerability

DEXMA DexGate is a device from DEXMA, Inc. A security vulnerability exists in DEXMA DexGate version 20130114, which stems from the presence of improper authentication and allows an attacker to impersonate a legitimate user by generating a request using a cookie header...

Tennessee Valley Authority: access to profile & reset password page without authentication

Vulnerability description not provided...

Exploit for Improper Authentication in Fit2Cloud Jumpserver

BlackJump Chinese |...

CVE-2023-4562

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending...

CVE-2023-4562 Information Disclosure, Information Tampering and Authentication Bypass Vulnerability in MELSEC-F Series main module

Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper data in the product without authentication by sending...

CVE-2023-4562

CVE-2023-4562 concerns Mitsubishi Electric MELSEC-F Series main modules. The vulnerability is described as an Improper Authentication flaw that may allow a remote, unauthenticated attacker to obtain sequence programs or write malicious data by sending illegitimate messages. Public details consist...

Mitsubishi Electric MELSEC-F Series

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Corporation Equipment : MELSEC-F Series Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability may allow a remote...

Dell EMC iDRAC9 4.40.00.00 < 4.40.10.00 (DSA-2021-082)

The version of Dell EMC iDRAC9 installed on the remote host is prior to 4.40.10.00. It is, therefore, affected by a vulnerability as referenced in the DSA-2021-082 advisory. - Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability....

CVE-2023-45246

The CVE-2023-45246 issue affects Acronis products: Cyber Protect Cloud Agent (Linux/macOS/Windows) before build 36343 and Cyber Protect 16 before build 39169. It stems from missing/improper authentication, enabling sensitive information disclosure and manipulation (confidentiality and integrity i...

CVE-2023-45246

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 36343, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...

Improper Authentication

asyncua is vulnerable to Improper Authentication. The vulnerability is due to a missing active session check, which lets an attacker access an Address Space without encryption and authentication allowing an attacker to steal sensitive data...

Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent Authorization Issues Vulnerability

Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent are both products of Acronis, Switzerland.Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise. Combining backup, anti-malware, network security and endpoint management features such as vulnerabili...