Improper Ownership Management

Overview Affected versions of this package are vulnerable to Improper Ownership Management in the AuthManager process. An attacker can cause the association of a temporary account's username and IP address with a real username in AbuseLog by creating a permanent account from a temporary account...

CVE-2025-6592 Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...

CVE-2025-6592

CVE-2025-6592 affects Wikimedia Foundation AbuseFilter, specifically the AuthManager.php component. The issue impacts AbuseFilter versions prior to 1.43.2 and 1.44.0. Red Hat, Debian, and OSV records corroborate the vulnerability in AbuseFilter/AuthManager.php and reference affected versions. Sny...

CVE-2025-6592 Creating a permanent account from a temporary account associates temp username and IP address with real username in AbuseLog

Vulnerability in Wikimedia Foundation AbuseFilter. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects AbuseFilter: from fe0b1cb9e9691faf4d8d9bd80646589f6ec37615 before 1.43.2, 1.44.0...

CVE-2018-17404

The SBIbuddy aka com.sbi.erupee application 1.41 and 1.42 for Android might allow an attacker to sniff private information such as mobile number, PAN number from a government-issued ID, and date of birth...

PT-2008-2977

Name of the Vulnerable Software and Affected Versions Plone CMS versions 3.x through 3.1.x Description The issue allows remote attackers to gain permanent access to an account by sniffing the network, due to the use of invariant data when calculating an HMAC-SHA1 value for an authentication cooki...