CWE-287: Improper Authentication, page 42
Filter
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
What the weakness is: CWE-287 at MITRE
Ask an AI about CWE-287
ChatGPTClaudePerplexityGoogle AI Mode
Show the prompt
Explain CWE-287: Improper Authentication and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/287.html and https://cve.bz/cve/cwe/287?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 9.4CVE-2023-6353EPSS 1.0%
Tyler Technologies Civil and Criminal Electronic Filing allows an unauthenticated, remote attacker to upload, delete, and view files by manipulating the Upload.aspx 'enky' parameter.
- 5.3CVE-2023-6344EPSS 0.9%
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate directories using the tiffserver/te003.aspx or te004.aspx 'ifolder' parameter. This behavior is related to the use of a deprecated version…
- 5.3CVE-2023-6343EPSS 0.9%
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate and access sensitive files using the tiffserver/tssp.aspx 'FN' and 'PN' parameters. This behavior is related to the use of a deprecated ve…
- 9.8CVE-2023-6342EPSS 1.1%
Tyler Technologies Court Case Management Plus allows a remote attacker to authenticate as any user by manipulating at least the 'CmWebSearchPfp/Login.aspx?xyzldk=' and 'payforprint_CM/Redirector.ashx?userid=' parameters. The vulnerable "p…
- 9.8CVE-2023-34388EPSS 0.9%
An Improper Authentication vulnerability in the Schweitzer Engineering Laboratories SEL-451 could allow a remote unauthenticated attacker to potentially perform session hijacking attack and bypass authentication. See product Instruction…
- 7.5CVE-2023-35137EPSS 0.9%
An improper authentication vulnerability in the authentication module of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542 firmware version V5.21(ABAG.11)C0 could allow an unauthenticated attacker to obtain system information b…
- 3.8CVE-2023-29062EPSS 0.3%
The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource. This is possible through the use …
- 5.3CVE-2023-48121EPSS 0.8%
An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x build 20230401, Ezviz CS-C6CN-xxx prior to v5.3.x build 20230401, Ezviz CS-C3N-xx…
- 9.8CVE-2023-41264EPSS 1.0%
Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege escalation. This only occurs if the configuration omits the required restSettin…
- 8.8CVE-2022-41678ExploitEPSS 86%
Once an user is authenticated on Jolokia, he can potentially trigger arbitrary code execution. In details, in ActiveMQ configurations, jetty allows org.jolokia.http.AgentServlet to handler request to /api/jolokia org.jolokia.http.HttpRe…
- 9.8CVE-2023-6329ExploitEPSS 65%
An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used…
- 9.8CVE-2023-41999EPSS 1.4%
An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that allows them to authenticate to the management console and perform tasks that requir…
- 9.8CVE-2023-48312EPSS 0.6%
capsule-proxy is a reverse proxy for the capsule operator project. Affected versions are subject to a privilege escalation vulnerability which is based on a missing check if the user is authenticated based on the `TokenReview` result. All …
- 9.8CVE-2023-4677EPSS 0.5%
Cron log backup files contain administrator session IDs. It is trivial for any attacker who can reach the Pandora FMS Console to scrape the cron logs directory for cron log backups. The contents of these log files can then be abused to aut…
- 8.1CVE-2023-2437ExploitEPSS 6.7%
The UserPro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.1. This is due to insufficient verification on the user being supplied during a Facebook login through the plugin. This makes it …
- 9.8CVE-2023-6248EPSS 1.2%
The Syrus4 IoT gateway utilizes an unsecured MQTT server to download and execute arbitrary commands, allowing a remote unauthenticated attacker to execute code on any Syrus4 device connected to the cloud service. The MQTT server also leaks…
- 9.8CVE-2023-49105KEVEPSS 43%
An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no signing-key configured. This occurs bec…
- 9.8CVE-2023-48228EPSS 1.2%
authentik is an open-source identity provider. When initialising a oauth2 flow with a `code_challenge` and `code_method` (thus requesting PKCE), the single sign-on provider (authentik) must check if there is a matching and existing `code_v…
- 9.8CVE-2023-29155EPSS 1.1%
Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an attacker to obtain admin-level access to the host system.
- 9.8CVE-2023-44324EPSS 1.4%
Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature bypass. An unauthenticated attacker can abuse this vulnerability to access the AP…
- 9.8CVE-2023-41442EPSS 1.3%
An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code via a crafted request to the MQTT component.
- 8.8CVE-2023-43582EPSS 0.7%
Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.
- 5.4CVE-2023-47127EPSS 0.6%
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session …
- 7.8CVE-2023-32661EPSS 0.2%
Improper authentication in some Intel(R) NUC Kits NUC7PJYH and NUC7CJYH Realtek* SD Card Reader Driver installation software before version 10.0.19041.29098 may allow an authenticated user to potentially enable escalation of privilege via …
- 7.8CVE-2023-28377EPSS 0.2%
Improper authentication in some Intel(R) NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
- 8.8CVE-2023-22663EPSS 0.5%
Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access.
- 7.2CVE-2023-29975EPSS 1.7%
An issue discovered in Pfsense CE version 2.6.0 allows attackers to change the password of any user without verification.
- 9.8CVE-2023-4612EPSS 1.1%
Improper Authentication vulnerability in Apereo CAS in jakarta.servlet.http.HttpServletRequest.getRemoteAddr method allows Multi-Factor Authentication bypass.This issue affects CAS: through 7.0.0-RC7. It is unknown whether in new versions …
- 6.8CVE-2023-42554EPSS 0.3%
Improper Authentication vulnerabiity in Samsung Pass prior to version 4.3.00.17 allows physical attackers to bypass authentication.
- 7.1CVE-2023-42531EPSS 0.2%
Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.
- 7.8CVE-2023-24852EPSS 0.1%
Memory Corruption in Core due to secure memory access by user while loading modem image.
- 7.5CVE-2023-39345EPSS 0.6%
strapi is an open-source headless CMS. Versions prior to 4.13.1 did not properly restrict write access to fielded marked as private in the user registration endpoint. As such malicious users may be able to errantly modify their user record…
- 6.6CVE-2023-40660EPSS 1.0%
A flaw was found in OpenSC packages that allow a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length pin is passed. This issue poses …
- 5.3CVE-2023-46963EPSS 0.5%
An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function.
- 7.8CVE-2022-44569EPSS 0.8%
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
- 7.8CVE-2023-26455EPSS 0.2%
RMI was not requiring authentication when calling ChronosRMIService:setEventOrganizer. Attackers with local or adjacent network access could abuse the RMI service to modify calendar items using RMI. RMI access is restricted to localhost by…
- 5.9CVE-2023-46327EPSS 0.4%
Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient. W…
- 7.5CVE-2023-5627EPSS 0.4%
A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implementation of sensitive information protection, potentially allowing malicious users…
- 9.8CVE-2023-46249EPSS 0.8%
authentik is an open-source Identity Provider. Prior to versions 2023.8.4 and 2023.10.2, when the default admin user has been deleted, it is potentially possible for an attacker to set the password of the default admin user without any aut…
- 9.8CVE-2023-44397EPSS 0.7%
CloudExplorer Lite is an open source, lightweight cloud management platform. Prior to version 1.4.1, the gateway filter of CloudExplorer Lite uses a controller with path starting with `matching/API/`, which can cause a permission bypass. V…
- 5.0CVE-2023-21307EPSS 0.09%
In Bluetooth, there is a possible way for a paired Bluetooth device to access a long term identifier for an Android device due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges…
- 4.4CVE-2023-21297EPSS 0.09%
In SEPolicy, there is a possible way to access the factory MAC address due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
- 7.2CVE-2023-5844EPSS 0.7%
Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0.
- 9.8CVE-2023-5830ExploitEPSS 63%
A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of the component WebTools. The manipulation of the argument Server leads to improper…
- 8.8CVE-2023-35794EPSS 1.2%
An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) can be accessed without authentication. Specifically, there is no session cookie validation on the Access Controller; ins…
- 6.5CVE-2022-3681EPSS 0.3%
A vulnerability has been identified in the MR2600 router v1.0.18 and earlier that could allow an attacker within range of the wireless network to successfully brute force the WPS pin, potentially allowing them unauthorized access to a wire…
- 8.1CVE-2023-46290EPSS 5.1%
Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Services Platform web service and then use the token to log in into FactoryTalk® Servic…
- 5.4CVE-2022-34887EPSS 0.3%
Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.
- 7.5CVE-2023-30967EPSS 0.7%
Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system.
- 9.8CVE-2023-37283EPSS 0.9%
Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter