4570 matches found
PT-2022-18107 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an Improper Authentication vulnerability. A locally authenticated malicious user could potentially exploit this by sending malicious input to a System Management...
Amazon Linux 2022 : curl, curl-minimal, libcurl (ALAS2022-2022-065)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-065 advisory. A vulnerability was found in curl. This security flaw allows reusing OAUTH2-authenticated connections without properly ensuring that the connection was authenticated with the same credentials s...
Amazon Linux 2022 : curl, curl-minimal, libcurl (ALAS2022-2022-055)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-055 advisory. A vulnerability was found in curl. This security flaw allows reusing OAUTH2-authenticated connections without properly ensuring that the connection was authenticated with the same credentials s...
CVE-2022-37680
An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system Camera, Decoder and Encoder and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID...
CVE-2022-37680
An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system Camera, Decoder and Encoder and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID...
Authentication flaw
An improper authentication for critical function issue in Hitachi Kokusai Electric Network products for monitoring system Camera, Decoder and Encoder and bellow allows attckers to remotely reboot the device via a crafted POST request to the endpoint /ptipupgrade.cgi. Security information ID...
Improper Authentication
Description There are two permissions not working correctly: The Licenses - View and Modify License Files & the Self - Create API Keys permission. License Files Files can be uploaded to licenses. There is a permission for users called View and Modify License Files. However, this permission is...
CVE-2021-4142
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...
CVE-2021-4142
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...
CVE-2021-4142
The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA simple content access certificate for authentication with Candlepin...
CVE-2021-4142
CVE-2021-4142 affects the Candlepin component of Red Hat Satellite, describing an improper authentication flaw where a local attacker could leverage a valid SCA certificate to authenticate with Candlepin. The public documents report a CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) with a b...
Improper Authentication
Overview omniauth is a generalized Rack framework for multiple-provider authentication. Affected versions of this package are vulnerable to Improper Authentication. It does not escape the messagekey value. Remediation Upgrade omniauth to version 1.9.2 or higher. References - GitHub Commit...
CVE-2022-22730
Improper authentication in the IntelR Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2022-22730
Improper authentication in the IntelR Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2022-22730
The CVE concerns Intel® Edge Insights for Industrial software with improper authentication that could allow an unauthenticated user to escalate privileges via network access. Affected product: Intel® Edge Insights for Industrial software prior to version 2.6.1. Root cause: improper authentication...
PT-2022-15650 · Intel · Intel Edge Insights For Industrial
Name of the Vulnerable Software and Affected Versions: IntelR Edge Insights for Industrial versions prior to 2.6.1 Description: The issue is related to improper authentication, which may allow an unauthenticated user to potentially enable escalation of privilege via network access. Recommendation...
CVE-2022-2336 Softing Secure Integration Server Improper Authentication
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...
CVE-2022-2336 Softing Secure Integration Server Improper Authentication
Softing Secure Integration Server, edgeConnector, and edgeAggregator software ships with the default administrator credentials as admin and password as admin. This allows Softing to log in to the server directly to perform administrative functions. Upon installation or upon first login, the...
EulerOS 2.0 SP8 : curl (EulerOS-SA-2022-2217)
According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections...