405 matches found
Cross site request forgery (csrf)
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request...
CVE-2020-24028
ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates. NOTE: as of 2025-10-14, the Supplier's perspective is that this "does not allow administrative privilege gain. Authorization is enforced...
CVE-2020-24028
The CVE-2020-24028 entry concerns ForLogic Qualiex v1 and v3. It states that an authenticated customer can achieve privilege escalation via actions such as creating users, changing passwords, or updating user permissions, within the user’s own permission scope. The supplier‑provided note (as of 2...
CVE-2020-24029
CVE-2020-24029 affects ForLogic Qualiex v1 and v3, where unauthenticated password changes could expose customer/admin permissions and data via a simple request. The root cause is unauthenticated password changes; as of 2025-10-14, the supplier indicates this is corrected in all maintained version...
CVE-2020-24029
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-35459)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 3.2.0, which stems from the program incorrectly handling brute force attacks. An attacker could exploit the vulnerability to...
CVE-2020-1703
CVE-2020-1703 entry is rejected and does not represent an active vulnerability.
The vulnerability of the Red Hat IPA domain controller, related to the lack of automatic termination of all sessions after password changes, allows attackers to compromise the confidentiality and integrity of the protected information.
The vulnerability of the Red Hat IPA domain controller is related to the absence of automatic termination of all sessions after the password is changed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...
ZSQL: Number Of Password Changes Required Before the Current Password Can Be Reused
Configure the number of password changes required before the current password can be reused. The configuration prevents a password from being cracked due to repeated use. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyrig...
The vulnerability of the Samba Active Directory domain controller in the Samba networking software package allows a perpetrator to circumvent existing security restrictions through brute-force attacks.
The vulnerability of the Samba Domain Controller in the Active Directory software for network interactions involves flaws in the password-changing mechanism. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions through brute-force attacks...
IT Security in The New Pope
Lol, IT Security is everywhere. Even in the first episode of "The New Pope" TV series the sequel of "The Young Pope", 2016 some monks change credentials in the Vatican's IT systems under cover of night. This happened after, well, some unexpected changes in the corporate culture and organizational...
Debian: Security Advisory (DSA-4595-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2019-3467
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
DEBIAN-CVE-2019-3467
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
CVE-2019-3467
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
Default credentials
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
UBUNTU-CVE-2019-3467
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
CVE-2019-3467
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
CVE-2019-3467
Debian-edu-config all versions 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals...
Debian: Security Advisory (DSA-4589-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...