8633 matches found
Authentication flaw
DM FingerTool v1.19 in the DM PD065 Secure USB is susceptible to improper authentication by a replay attack, allowing local attackers to bypass user authentication and access all features and data on the USB...
CVE-2021-26824
DM FingerTool v1.19 in the DM PD065 Secure USB is affected by improper authentication via a replay attack that allows a local attacker to bypass user authentication and access all features and data on the USB. Root cause: replay-based authentication bypass. Impact: local access to all functions a...
CVE-2021-32794: Improper Authentication
ArchiSteamFarm is a C application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code POST /Api/ASF ASF API endpoint responsible for updating global ASF config incorrectly removed IPCPassword from the resulting config when the caller did not...
CVE-2020-21932: Improper Authentication
A vulnerability in /Login.html of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to bypass login and obtain a partially authorized token and uid...
CVE-2021-21564
Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or perform unauthorized actions by sending malformed data...
PT-2021-19995
Name of the Vulnerable Software and Affected Versions WebAccess/NMS versions prior to 3.0.3 Build6299 Description The issue allows unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all the devices managed via WebAccess/NMS, du...
(Pwn2Own) Microsoft Exchange Server PowerShell Improper Authentication Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Powershell...
JetBlue: Access to tomcat-manager with default creds
The Apache Tomcat/6.0.35 server used by a domain was vulnerable to improper authentication due to the use of default credentials, allowing unauthorized access to the admin manager. The vulnerability was discovered and reported...
The vulnerability of the REST API interface of the security, automation, and response platform Cortex XSOAR allows attackers to gain unauthorized access to protected information.
The vulnerability of the REST API interface of the security, automation, and response platform of Cortex XSOAR is related to improper authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Cisco Business Process Automation software lies in improper configuration of authentication for management commands and access settings to action logs, allowing attackers to escalate their privileges.
The vulnerability of the Cisco Business Process Automation software relates to incorrect authentication settings for control commands and incorrect access settings to action logs. Exploiting this vulnerability could allow a malicious actor to enhance their privileges by sending specially crafted...
The vulnerability of the Cisco Business Process Automation software lies in improper configuration of authentication for management commands and access settings to action logs, allowing attackers to escalate their privileges.
The vulnerability of the Cisco Business Process Automation software relates to incorrect authentication settings for control commands and incorrect access settings to action logs. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending specially crafted HT...
CVE-2021-20593: Improper Authentication
Incorrect Implementation of Authentication Algorithm in Mitsubishi Electric Air Conditioning System/Centralized Controllers G-50A Ver.2.50 to Ver. 3.35, GB-50A Ver.2.50 to Ver. 3.35, AG-150A-A Ver.3.20 and prior, AG-150A-J Ver.3.20 and prior, GB-50ADA-A Ver.3.20 and prior, GB-50ADA-J Ver.3.20 and...
CVE-2021-26088
An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...
CVE-2021-26088
An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...
CVE-2021-26088
An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...
CVE-2021-26088
CVE-2021-26088 affects Fortinet FSSO Collector (versions 5.0.295 and earlier). The vulnerability is improper authentication that can let an unauthenticated user bypass a FSSO firewall policy and access the protected network by sending specially crafted UDP login notification packets. Impact descr...
CVE-2021-26088: Improper Authentication
An improper authentication vulnerability in FSSO Collector version 5.0.295 and below may allow an unauthenticated user to bypass a FSSO firewall policy and access the protected network via sending specifically crafted UDP login notification packets...
CVE-2020-19037: Improper Authentication
Incorrect Access Control vulnearbility in Halo 0.4.3, which allows a malicious user to bypass encrption to view encrpted articles via cookies...
Authorization
Improper Authorization in ThinkSAAS v2.7 allows remote attackers to modify the description of any user's photo via the "photoid%5B%5D" and "photodesc%5B%5D" parameters in the component "index.php?app=photo."...