Lucene search
Veracode Vulnerability DatabaseVERACODE:32254HistorySep 28, 2021 - 5:08 a.m.
Insecure Access Control
2021-09-2805:08:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.003 Low
EPSS
Percentile
71.1%
web-auth/webauthn-framework has insecure access control. The vulnerability exists due to a lack of check of user presence allowing an attacker to login to vulnerable service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| web-auth/webauthn-framework | le | v3.3.3 | |
| web-auth/webauthn-framework | le | v3.3.3 |
Related
prion
prion
Design/Logic Flaw
2021-09-27 06:15:00
osv
osv
CVE-2021-38299
2021-09-27 06:15:07
Improper Access Control in Webauthn Framework
2021-09-29 17:16:07
cvelist
cvelist
CVE-2021-38299
2021-09-27 05:55:51
cve
cve
CVE-2021-38299
2021-09-27 06:15:07
nvd
nvd
CVE-2021-38299
2021-09-27 06:15:07
nextcloud
nextcloud
Missing User Presence Check in Nextcloud WebAuthn login
2021-10-25 11:02:44
github
github
Improper Access Control in Webauthn Framework
2021-09-29 17:16:07