Lucene search
Veracode Vulnerability DatabaseVERACODE:29039HistoryJan 20, 2021 - 4:29 p.m.
Authentication Bypass
2021-01-2016:29:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
authentication bypass
oauth2
api access
disabled user
email address
software
EPSS
0.002
Percentile
55.4%
mautic/core is vulnerable to authentication bypass. An OAuth2 auth plugin added for API access is able to allow a disabled user to still login using email address.
Related
osv
osv
CVE-2017-1000489
2018-01-03 17:29:00
Disabled users able to log in with third party SSO plugin
2021-01-19 21:16:19
cvelist
cvelist
CVE-2017-1000489
2018-01-03 17:00:00
nvd
nvd
CVE-2017-1000489
2018-01-03 17:29:00
prion
prion
Code injection
2018-01-03 17:29:00
github
github
Disabled users able to log in with third party SSO plugin
2021-01-19 21:16:19
cve
cve
CVE-2017-1000489
2018-01-03 17:29:00