PT-2023-32047

Name of the Vulnerable Software and Affected Versions SATO CL4NX-J Plus version 1.13.2-u455 r2 Description A critical issue has been found in the Cookie Handler component, allowing for improper authentication when the input auth=user,level1,settings; web=true is manipulated. This requires access ...

SATO America CL4NX License Issue Vulnerability

The SATO America CL4NX is a printer from SATO America. An authorization issue vulnerability exists in SATO America CL4NX version 1.13.2-u455r2, which stems from the presence of an improper authentication vulnerability...

CVE-2023-44152

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 Linux, macOS, Windows before build 35979...

CVE-2023-44152

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 Linux, macOS, Windows before build 35979...

CVE-2023-44152

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 Linux, macOS, Windows before build 35979...

CVE-2023-44152

CVE-2023-44152 affects Acronis Cyber Protect 15 prior to build 35979. The root cause is improper authentication, enabling disclosure and manipulation of sensitive information. Impact is described as sensitive information disclosure and manipulation with no exploitation specifics provided beyond t...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security vulnerabili...

PT-2023-28190

Name of the Vulnerable Software and Affected Versions Simple Membership versions through 4.3.4 Description The issue is related to an Improper Authentication vulnerability. This vulnerability affects the Simple Membership plugin, which is used for membership management. Recommendations For versio...

CVE-2023-42818: Improper Authentication

JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...

Sensitive information disclosure and manipulation due to improper authentication

...

Hitachi Energy Asset Suite 9

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.9 ATTENTION : Exploitable remotely/low attack complexity Vendor : Hitachi Energy Equipment : Asset Suite 9 Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated user to enter...

DEXMA DexGate

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : DEXMA Equipment : DEXGate Vulnerabilities : Cross-Site Scripting, Cross-Site Request Forgery, Improper Authentication, Cleartext Transmission of Sensitive Information, Exposure of Sensitive...

CVE-2023-41904: Improper Authentication

Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass for AuthToken generation in REST APIs...

CVE-2023-31015

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service...

CVE-2023-31015: Improper Authentication

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service...

CVE-2023-0773: Improper Authentication

The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerabili...

PT-2023-23113

Name of the Vulnerable Software and Affected Versions NVIDIA DGX H100 BMC affected versions not specified Description The issue is related to a vulnerability in the REST service of NVIDIA DGX H100 BMC, where a host user may cause an improper authentication issue. This could lead to escalation of...

Fortinet FortiClient Authorization Bypass RCE

The vulnerability of the Fortinet FortiClient security device for Windows relates to improper authentication. Exploiting this vulnerability allows an attacker to execute arbitrary code or commands using a specially created request...

CVE-2023-4985

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

CVE-2023-4985

A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locally. The exploit has been disclosed to the public and may be...