CVE-2024-42465 Lack of resources and rate limiting - two factor authentication

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9...

CVE-2024-42465 Lack of resources and rate limiting - two factor authentication

Improper Restriction of Excessive Authentication Attempts vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Abuse.This issue affects upKeeper Manager: through 5.1.9...

CVE-2024-42464 Leak of user information

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9...

CVE-2024-42464

CVE-2024-42464 affects upKeeper Manager (upKeeper) up to version 5.1.9. The issue is an Authorization Bypass Through User-Controlled Key, where REST’s trust in the system resource can be abused to obtain sensitive data. The root cause is described as an authorization bypass via a user-controlled ...

CVE-2024-42464 Leak of user information

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9...

CVE-2024-42463 Leak of organizations messages

Authorization Bypass Through User-Controlled Key vulnerability in upKeeper Solutions product upKeeper Manager allows Utilizing REST's Trust in the System Resource to Obtain Sensitive Data.This issue affects upKeeper Manager: through 5.1.9...

CVE-2024-42463

The connected documents provide concrete details for CVE-2024-42463: in upKeeper Manager, versions through 5.1.9 are affected by an Authorization Bypass via a user-controlled key that abuses REST’s trust in system resources to obtain sensitive data. Practical impact is unauthorized access to sens...

CVE-2024-42462 Bypass multifactor authentication

Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Bypass.This issue affects upKeeper Manager: through 5.1.9...

CVE-2024-42462 Bypass multifactor authentication

Improper Authentication vulnerability in upKeeper Solutions product upKeeper Manager allows Authentication Bypass.This issue affects upKeeper Manager: through 5.1.9...

CVE-2024-42462

CVE-2024-42462 affects upKeeper Manager (upKeeper) up to version 5.1.9. The issue is an improper authentication vulnerability that allows authentication bypass. Severity is rated CRITICAL (CVSS v3.1: AV/N, AC/L, PR/N, UI/N, S/U, C/H, I/H, A/H; CVSS v4.0: VC/H, SC/H, VI/H, SI/H, VA/H, SA/H). Docum...

PT-2024-29960 · Unknown · Upkeeper Manager

Name of the Vulnerable Software and Affected Versions: upKeeper Manager versions through 5.1.9 Description: An Authorization Bypass Through User-Controlled Key issue exists in upKeeper Manager, allowing an attacker to utilize REST's trust in the system resource to obtain sensitive data...

PT-2024-29959 · Unknown · Upkeeper Manager

Name of the Vulnerable Software and Affected Versions: upKeeper Manager versions through 5.1.9 Description: The issue allows unauthorized access to sensitive data by exploiting REST's trust in system resources through a user-controlled key. This can lead to an authorization bypass, enabling threa...

PT-2024-29962 · Unknown · Upkeeper Manager

Name of the Vulnerable Software and Affected Versions: upKeeper Manager versions through 5.1.9 Description: The issue affects upKeeper Manager, allowing authentication abuse due to improper restriction of excessive authentication attempts. This enables potential attackers to exploit the system...

PT-2024-29961 · Unknown · Upkeeper Manager

Name of the Vulnerable Software and Affected Versions: upKeeper Manager versions through 5.1.9 Description: The issue is related to an improper restriction of excessive authentication attempts in upKeeper Manager, allowing authentication abuse. This problem can be exploited, potentially leading t...