com.webauthn4j:webauthn4j-spring-security-metadata (>=0.7.0.release, <=0.9.0.release), com.webauthn4j:webauthn4j-spring-security-test (>=0.7.0.release, <=0.9.0.release) potentially affected by CVE-2023-45669 via com.webauthn4j:webauthn4j-spring-security-core (>=0.7.0.release, <=0.9.0.release)

com.webauthn4j:webauthn4j-spring-security-core MAVEN version =0.7.0.release, =0.7.0.release, =0.7.0.release, =0.9.0.release Source cves: CVE-2023-45669 Source advisory: OSV:GHSA-V9HX-V6VF-G36J...

com.webauthn4j:webauthn4j-spring-security-metadata (>=0.7.0.release, <=0.9.0.release), com.webauthn4j:webauthn4j-spring-security-test (>=0.7.0.release, <=0.9.0.release) potentially affected by CVE-2023-45669 via com.webauthn4j:webauthn4j-spring-security-core (>=0.7.0.release, <=0.9.0.release)

com.webauthn4j:webauthn4j-spring-security-core MAVEN version =0.7.0.release, =0.7.0.release, =0.7.0.release, =0.9.0.release Source cves: CVE-2023-45669 Source advisory: GHSA-V9HX-V6VF-G36J...

CVE-2023-45669

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...

CVE-2023-45669

CVE-2023-45669 affects WebAuthn4J Spring Security via the webauthn4j-spring-security-core component. The bug arises from improper persistence of an incremented signature counter returned by the authenticator, causing cloned authenticators to evade detection. Reported impact: an attacker could abu...

com.webauthn4j:webauthn4j-spring-security-metadata (>=0.7.0.release, <=0.9.0.release), com.webauthn4j:webauthn4j-spring-security-test (>=0.7.0.release, <=0.9.0.release) potentially affected by CVE-2023-45669 via com.webauthn4j:webauthn4j-spring-security-core (>=0.7.0.release, <=0.9.0.release)

com.webauthn4j:webauthn4j-spring-security-core MAVEN version =0.7.0.release, =0.7.0.release, =0.7.0.release, =0.9.0.release Source cves: CVE-2023-45669 Source advisory: MEND:CVE-2023-45669...

CVE-2023-45669 Improper signature counter value handling in webauthn4j-spring-security

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...

CVE-2023-45669 Improper signature counter value handling in webauthn4j-spring-security

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...

PT-2023-29638 · Unknown · Webauthn4J Spring Security

Name of the Vulnerable Software and Affected Versions: WebAuthn4J Spring Security versions prior to 0.9.1.RELEASE Description: A flaw was found in webauthn4j-spring-security-core, where improper signature counter value handling occurs. When an authenticator returns an incremented signature counte...

CVE-2023-45669: Improper Authentication

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...