CWE:

	Tytuł	Data	Autor
Med.	Intel Data Center Manager 4.1.1.45749 Authentication Bypass / Spoofing	01.12.2022	Julien Ahrens
Med.	Microsoft Windows Hello Face Authentication Bypass	20.12.2017	SySS

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-09-23

CVE-2024-45453

Updating...

Authentication Bypass by Spoofing vulnerability in Peter Hardy-vanDoorn Maintenance Redirect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maintenance Redirect: from n/a through 2.0.1.

2024-07-30

CVE-2023-48396

Updating...

Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user. Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token. This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version 1.0.1, which fixes the issue.

2024-07-19

CVE-2024-41107

Updating...

The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account. Affected users are recommended to disable the SAML authentication plugin by setting the "saml2.enabled" global setting to "false", or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue.

2024-07-09

CVE-2024-37430

Updating...

Authentication Bypass by Spoofing vulnerability in Patreon Patreon WordPress allows Functionality Misuse.This issue affects Patreon WordPress: from n/a through 1.9.0.

2024-06-28

CVE-2024-39350

Updating...

A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.

2024-06-10

CVE-2024-35749

Updating...

Authentication Bypass by Spoofing vulnerability in Acurax Under Construction / Maintenance Mode from Acurax allows Authentication Bypass.This issue affects Under Construction / Maintenance Mode from Acurax: from n/a through 2.6.

2024-06-05

CVE-2024-5037

Updating...

A flaw was found in OpenShift's Telemeter. If certain conditions are in place, an attacker can use a forged token to bypass the issue ("iss") check during JSON web token (JWT) authentication.

2024-06-04

	CVE-2023-51667	Updating...	Authentication Bypass by Spoofing vulnerability in FeedbackWP Rate my Post �?? WP Rating System allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Rate my Post �?? WP Rating System: from n/a through 3.4.2.
	CVE-2023-41134	Updating...	Authentication Bypass by Spoofing vulnerability in pluginkollektiv Antispam Bee allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Antispam Bee: from n/a through 2.11.3.
	CVE-2023-37865	Updating...	Authentication Bypass by Spoofing vulnerability in IP2Location Download IP2Location Country Blocker allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Download IP2Location Country Blocker: from n/a through 2.29.1.

 

---

Copyright 2024, cxsecurity.com