CVE-2020-35207

LogMeIn LastPass Password Manager for iOS (version 4.8.11.2403) has an authentication bypass vulnerability: PIN unlock can be forced to succeed via runtime manipulation, allowing an attacker to authenticate with an arbitrary PIN. Root cause: manipulation of the PIN check process. Impact: partial ...

CVE-2020-35207

An issue was discovered in the LogMein LastPass Password Manager aka com.lastpass.ilastpass app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authentication result to be true through runtime manipulation. In other words, an attacker could authenticate wi...

CVE-2019-16241

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. Thi...

Authentication flaw

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. Thi...

CVE-2019-16241

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. Thi...

CVE-2019-16241

CVE-2019-16241 affects TCL Alcatel Cingular Flip 2 B9HUAH1: PIN authentication can be bypassed by placing a specially crafted file in /data/local/tmp/. The System lock-screen app checks for this file’s existence and disables PIN if found, typically via ADB over USB. This is the explicit, device-s...

FAQ: XenMobile Client Properties

Question: What does XenMobile Client properties do? Options to enable/disable client properties Answer : Client properties contain information that is provided directly to Secure Hub on user devices. Client properties are located in the XenMobile console inSettings Client Client Properties. Clien...

During New MAM Enrollment End User Receives - "An error occurred. The enrollment will stop"

During enrollment MDM proceeds successfully, but the MAM enrollment fails with "An error occurred. The enrollment will stop". OnAndroid you may experience the following: Enrollment will successfully complete, however Secure Hub is enrolled only in MDM mode not MAM. Scenarios that Identify failed...

CVE-2016-4824

The Wi-Fi Protected Setup WPS implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network access via a brute-force attack...

CVE-2016-4824

The CVE-2016-4824 issue affects Corega CG-WLR300GNV and CG-WLR300GNV-W wireless routers. The WPS PIN authentication implementation does not limit the number of attempts, enabling authenticated brute-force attempts from within wireless range to recover the PIN and gain network access. Affected com...

CVE-2016-4824

The Wi-Fi Protected Setup WPS implementation on Corega CG-WLR300GNV and CG-WLR300GNV-W devices does not restrict the number of PIN authentication attempts, which makes it easier for remote attackers to obtain network access via a brute-force attack...

Windows 8 Security flaw : Logon Passwords Stores in Plain Text

Windows 8 is the first operating system from Microsoft to support alternative non-biometric authentication mechanisms such as Picture Password and PIN. A vulnerability discovered by a password security vendor - "Passcape" in Microsoft's Windows 8 operating system that it saves a log on password i...

CVE-2011-5053

The Wi-Fi Protected Setup WPS protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or...

Design/Logic Flaw

The Wi-Fi Protected Setup WPS protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or...

CVE-2011-5053

The CVE-2011-5053 issue concerns Wi-Fi Protected Setup (WPS) external registrar PIN authentication, where failed PINs leak information via EAP-NACK messages, enabling an attacker within range to brute-force the 8-digit PIN and obtain the network password or reconfigure the AP. Documented impact i...

CVE-2011-5053

The Wi-Fi Protected Setup WPS protocol, when the "external registrar" authentication method is used, does not properly inform clients about failed PIN authentication, which makes it easier for remote attackers to discover the PIN value, and consequently discover the Wi-Fi network password or...

Mandriva Update for bluez-utils MDVA-2008:189 (bluez-utils)

Check for the Version of bluez-utils OpenVAS Vulnerability Test Mandriva Update for bluez-utils MDVA-2008:189 bluez-utils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for bluez-utils MDVA-2008:189 (bluez-utils)

Check for the Version of bluez-utils OpenVAS Vulnerability Test Mandriva Update for bluez-utils MDVA-2008:189 bluez-utils Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...