CVE-2024-12056: Improperly Implemented Security Check for Standard

The Client secret is not checked when using the OAuth Password grant type. By exploiting this vulnerability, an attacker could connect to a web server using a client application not explicitly authorized as part of the OAuth deployment. Exploitation requires valid credentials and does not permit...

Design/Logic Flaw

In JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented...