PT-2020-19944

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.18.261 Bitdefender Endpoint Security SDK versions prior to 6.6.18.261 Description An improper authentication issue allows an unprivileged local attacker to escalate privileg...

CVE-2020-15164: Improper Authentication

in Scratch Login MediaWiki extension before version 1.1, any account can be logged into by using the same username with leading, trailing, or repeated underscores, since those are treated as whitespace and trimmed by MediaWiki. This affects all users on any wiki using this extension. Since versio...

CVE-2020-4167

IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized actions due to improper authenciation mechanisms. IBM X-Force ID: 174403...

CVE-2020-4167: Improper Authentication

IBM Security Guardium Insights 2.0.1 could allow an attacker to obtain sensitive information or perform unauthorized actions due to improper authenciation mechanisms. IBM X-Force ID: 174403...

PT-2020-17891

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Insights version 2.0.1 Description The issue is related to improper authentication mechanisms, which could allow an attacker to obtain sensitive information or perform unauthorized actions. Recommendations For IBM Securit...

CVE-2020-15482: Improper Authentication

An issue was discovered on Nescomed Multipara Monitor M1000 devices. The device enables an unencrypted TELNET service by default, with a blank password for the admin account. This allows an attacker to gain root access to the device over the local network...

CVE-2020-3151: Improper Authentication

A vulnerability in the CLI of Cisco Connected Mobile Experiences CMX could allow an authenticated, local attacker with administrative credentials to bypass restrictions on the CLI. The vulnerability is due to insufficient security mechanisms in the restricted shell implementation. An attacker cou...

CVE-2020-24612: Improper Authentication

An issue was discovered in the selinux-policy aka Reference Policy package 3.14 through 2020-08-24 because the .config/Yubico directory is mishandled. Consequently, when SELinux is in enforced mode, pam-u2f is not allowed to read the user's U2F configuration file. If configured with the nouserok...

CVE-2020-19888: Improper Authentication

DBHcms v1.2.0 has an unauthorized operation vulnerability because there's no access control at line 175 of dbhcms\page.php for empty cache operation. This vulnerability can be exploited to empty a table...

CVE-2020-16239: Improper Authentication

When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct...

PT-2020-18193

Name of the Vulnerable Software and Affected Versions IBM Event Streams version 10.0.0 Description The issue is related to improper authentication validation, which could allow an authenticated user to perform tasks on a schema. Recommendations For IBM Event Streams version 10.0.0, update to a...

CVE-2020-4662: Improper Authentication

IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233...

CVE-2020-8685

Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...

CVE-2020-8685

Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...

Authentication flaw

Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...

CVE-2020-8685

Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...

CVE-2020-8713

Improper authentication for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8708

Improper authentication for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8713

Improper authentication for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2020-8714

Improper authentication for some IntelR Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable escalation of privilege via local access...