8645 matches found
CVE-2021-44759
Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a man in the middle attack. This issue affects Apache Traffic Server 8.0.0 to 8.1.0...
UBUNTU-CVE-2021-44759
Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a man in the middle attack. This issue affects Apache Traffic Server 8.0.0 to 8.1.0...
CVE-2021-44759
Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a man in the middle attack. This issue affects Apache Traffic Server 8.0.0 to 8.1.0...
CVE-2021-44759
CVE-2021-44759 affects Apache Traffic Server 8.0.0–8.1.0. The root cause is improper authentication in the TLS origin validation, enabling a man-in-the-middle attack. Impact is partial confidentiality, integrity, and availability. Publicly documented references indicate MITM risk via TLS origin v...
CVE-2021-44759: Improper Authentication
Improper Authentication vulnerability in TLS origin validation of Apache Traffic Server allows an attacker to create a man in the middle attack. This issue affects Apache Traffic Server 8.0.0 to 8.1.0...
CVE-2022-0996: Improper Authentication
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...
CVE-2022-0996
A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication...
CVE-2021-31326: Improper Authentication
D-Link DIR-816 A2 1.10 B05 allows unauthenticated attackers to arbitrarily reset the device via a crafted tokenid parameter to /goform/form2Reboot.cgi...
PT-2022-12225 · Apache · Apache Traffic Server
Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.0 Description: The issue is related to an Improper Authentication vulnerability in the TLS origin validation of Apache Traffic Server, allowing an attacker to create a man-in-the-middle attack...
Insecure Authentication
The Candlepin component of Red Hat Satellite is using insecure authentication. An improper authentication flaw allows an attacker to use the SCA simple content access certificate for authentication with Candlepin...
CVE-2022-0996
A vulnerability was found in the 389 Directory Server. This issue allows expired passwords to access the database, causing improper authentication...
Exploit for Improper Authentication in Redhat 389_Directory_Server
389-ds...
PT-2022-6593 · Red Hat +5 · 389 Directory Server +6
Name of the Vulnerable Software and Affected Versions: 389 Directory Server affected versions not specified Description: The issue is related to improper authentication in the 389 Directory Server, allowing expired passwords to access the database. This can be exploited by a remote attacker to ga...
CVE-2022-22656: Improper Authentication
An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen...
CVE-2022-26504
Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...
CVE-2022-26504
Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...
CVE-2022-26504
Veeam Backup & Replication versions 9.5U3, 9.5U4, 10.x, and 11.x contain an improper authentication vulnerability in the component used for Microsoft System Center Virtual Machine Manager (SCVMM). Attackers can exploit this flaw to execute arbitrary code via the Veeam.Backup.PSManager.exe process...
CVE-2022-26504
Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...
CVE-2022-26504: Improper Authentication
Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...