Lucene search
+L

6 matches found

Vulnrichment
Vulnrichment
•added 2023/10/16 6:20 p.m.•12 views

CVE-2023-45669 Improper signature counter value handling in webauthn4j-spring-security

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...

4.8CVSS6.6AI score0.0052EPSS
SaveExploits0References3
CVE
CVE
•added 2023/10/16 6:20 p.m.•93 views

CVE-2023-45669

CVE-2023-45669 affects WebAuthn4J Spring Security via the webauthn4j-spring-security-core component. The bug arises from improper persistence of an incremented signature counter returned by the authenticator, causing cloned authenticators to evade detection. Reported impact: an attacker could abu...

5.3CVSS5AI score0.0052EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/10/16 6:20 p.m.•48 views

CVE-2023-45669 Improper signature counter value handling in webauthn4j-spring-security

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...

4.8CVSS5.4AI score0.0052EPSS
SaveExploits0References3
Mend
Mend
•added 2023/10/16 6:20 p.m.•2 views

CVE-2023-45669

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...

6.3CVSS0.0052EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/10/16 12:00 a.m.•29 views

PT-2023-29638 · Unknown · Webauthn4J Spring Security

Name of the Vulnerable Software and Affected Versions: WebAuthn4J Spring Security versions prior to 0.9.1.RELEASE Description: A flaw was found in webauthn4j-spring-security-core, where improper signature counter value handling occurs. When an authenticator returns an incremented signature counte...

5.3CVSS4.7AI score0.0052EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/16 12:00 a.m.•4 views

CVE-2023-45669: Improper Authentication

WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an authneticator returns an incremented signature counter val...

5.3CVSS5.5AI score0.0052EPSS
SaveExploits0References2
Rows per page
Query Builder