90 matches found
Server Performance Degradation
OPCFoundation/UA-.NETStandard is vulnerable to Server Performance Degradation. The vulnerability is due to improper handling of requests with invalid credentials, which allows a remote attacker to degrade server performance gradually...
CVE-2024-45526
The OPC UA .NET Standard Stack (specifically the OPCFoundation.NetStandard.Opc.Ua and OPCFoundation.NetStandard.Opc.Ua.Core packages) is vulnerable to Allocation of Resources Without Limits or Throttling . A remote attacker can send specially crafted requests with invalid credentials , causing a ...
CVE-2024-45526: Allocation of Resources Without Limits or Throttling
An issue was discovered in OPC Foundation OPCFoundation/UA-.NETStandard through 1.5.374.78. A remote attacker can send requests with invalid credentials and cause the server performance to degrade gradually...
OPCFoundation UA-.NETStandard 安全漏洞
OPCFoundation UA-.NETStandard is a library of the OPCFoundation Foundation. A security vulnerability exists in OPCFoundation UA-.NETStandard version 1.5.374.78 and earlier, which originates from a remote attacker who can send requests with invalid credentials, gradually leading to a degradation o...
Improper Authentication
libfreerdp.so is vulnerable to Improper Authentication. The vulnerability is due to invalid credentials being accepted if the server has configured an invalid SAM file path. The attacker can successfully authenticate with invalid credentials if the SAM file path is incorrect...
PVS | Error Id: XDDS:A6D8C1E7 - Unable to add Target Device to Catalog
Attempting to add Target Devices will return the following error: "The virtual machine with Mac Address in the selected Device Collection could not be found in any available connection". In View Details the following information is present: Error Id: XDDS:A6D8C1E7 Exception: DesktopStudioErrorId ...
CVE-2023-4486
Under certain circumstances, invalid authentication credentials could be sent to the login endpoint of Johnson Controls Metasys NAE55, SNE, and SNC engines prior to versions 11.0.6 and 12.0.4 and Facility Explorer F4-SNC engines prior to versions 11.0.6 and 12.0.4 to cause denial-of-service...
Johnson Controls Facility Explorer Security Vulnerability
Johnson Controls Facility Explorer is a monitoring controller from Johnson Controls that provides scalable system-wide monitoring and control. A security vulnerability exists in Johnson Controls Metasys and Facility Explorer that stems from the possibility that invalid authentication credentials...
PBM Error "Authentication failed: Invalid credentials" when adding machine to one catalog
When attempting to add machines to an existing catalog the process fails immediately with the below error, in Studio. "Machine Failures: domainname\machinename: Failed to create the virtual machine; domainname\machinename. Inner Error: A general system error occurred: PBM error occurred during...
CVE-2023-40725
A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application returns inconsistent error messages in response to invalid user credentials during login session. This allows an attacker to enumerate usernames, and identify valid usernames...
Azure Hosting Test connection shows invalid user name / password / Credentials
Unable to create new machine catalog Running the Test Connection fails with error "Invalid Credentials"...
platform: token exposed at importing project
A logic flaw exists in Ansible Automation platform. Whenever a private project is created with incorrect credentials, they are logged in plaintext. This flaw allows an attacker to retrieve the credentials from the log, resulting in the loss of confidentiality, integrity, and availability...
Improper Authentication
org.apache.accumulo:accumulo-shell is vulnerable to Improper Authentication. A remote attacker is able to gain access to valid user accounts by providing invalid credentials due to improper checks in THE authentication mechanism...
CVE-2023-34340: Improper Authentication
Improper Authentication vulnerability in Apache Software Foundation Apache Accumulo. This issue affects Apache Accumulo: 2.1.0. Accumulo 2.1.0 contains a defect in the user authentication process that may succeed when invalid credentials are provided. Users are advised to upgrade to 2.1.1...
PT-2023-24826 · Apache · Apache Accumulo
Name of the Vulnerable Software and Affected Versions: Apache Accumulo version 2.1.0 Description: The issue affects the user authentication process in Apache Accumulo, where a defect may allow authentication to succeed even when invalid credentials are provided. Recommendations: For Apache Accumu...
Apache Accumulo 授权问题漏洞
Apache Accumulo is a reliable, scalable, high-performance sorted distributed Key-Value storage application from the Apache Foundation USA. An authorization issue vulnerability exists in Apache Accumulo version 2.1.0 that stems from a flaw in the user authentication process, which may succeed when...
SUSE CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials...
SUSE CVE-2022-24883
FreeRDP is a free implementation of the Remote Desktop Protocol RDP. Prior to version 2.7.0, server side authentication against a SAM file might be successful for invalid credentials if the server has configured an invalid SAM file path. FreeRDP based clients are not affected. RDP server...
