CWE-287: Improper Authentication, page 43

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 7.5CVE-2023-27377EPSS 0.9%2023-10-25

   Missing authentication in the StudentPopupDetails_EmergencyContactDetails method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction of sensitive student data by unauthenticated attackers.

2. 8.8CVE-2023-5246EPSS 1.0%2023-10-23

   Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attac…

3. 6.5CVE-2023-38735EPSS 0.6%2023-10-22

   IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. I…

4. 5.3CVE-2023-4939EPSS 0.6%2023-10-21

   The SALESmanago plugin for WordPress is vulnerable to Log Injection in versions up to, and including, 3.2.4. This is due to the use of a weak authentication token for the /wp-json/salesmanago/v1/callbackApiV3 API endpoint which is simply a…

5. 8.8CVE-2023-41089EPSS 0.6%2023-10-19

   The affected product is vulnerable to an improper authentication vulnerability, which may allow an attacker to impersonate a legitimate user as long as the device keeps the session active, since the attack takes advantage of the cookie hea…

6. 5.3CVE-2023-45669EPSS 0.6%2023-10-16

   WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature counter value handling. A flaw was found in webauthn4j-spring-security-core. When an …

7. 9.1CVE-2023-4562EPSS 1.2%2023-10-13

   Improper Authentication vulnerability in Mitsubishi Electric Corporation MELSEC-F Series main modules allows a remote unauthenticated attacker to obtain sequence programs from the product or write malicious sequence programs or improper da…

8. 5.3CVE-2023-41261EPSS 0.6%2023-10-12

   An issue was discovered in /fcgi/scrut_fcgi.fcgi in Plixer Scrutinizer before 19.3.1. The csvExportReport endpoint action generateCSV does not require authentication and allows an unauthenticated user to export a report and access the resu…

9. 7.8CVE-2023-23632EPSS 0.2%2023-10-12

   BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access …

10. 9.8CVE-2023-24479EPSS 1.8%2023-10-11

    An authentication bypass vulnerability exists in the httpd nvram.cgi functionality of Yifan YF325 v1.0_20221108. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger…

11. 7.5CVE-2023-44096EPSS 0.4%2023-10-11

    Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.

12. 5.5CVE-2023-36724EPSS 0.5%2023-10-10

    Windows Power Management Service Information Disclosure Vulnerability

13. 7.5CVE-2023-43809EPSS 1.2%2023-10-04

    Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH…

14. 7.5CVE-2023-43805EPSS 0.8%2023-10-04

    Nexkey is a fork of Misskey, an open source, decentralized social media platform. Prior to version 12.121.9, incomplete URL validation can allow users to bypass authentication for access to the job queue dashboard. Version 12.121.9 contain…

15. 7.5CVE-2023-43793EPSS 0.8%2023-10-04

    Misskey is an open source, decentralized social media platform. Prior to version 2023.9.0, by editing the URL, a user can bypass the authentication of the Bull dashboard, which is the job queue management UI, and access it. Version 2023.9.…

16. 7.0CVE-2021-3784EPSS 0.2%2023-10-04

    Garuda Linux performs an insecure user creation and authentication that allows any user to impersonate the created account. By creating users from the 'Garuda settings manager', an insecure procedure is performed that keeps the created use…

17. 6.5CVE-2023-40376EPSS 0.6%2023-10-04

    IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X…

18. 7.5CVE-2023-28540EPSS 0.4%2023-10-03

    Cryptographic issue in Data Modem due to improper authentication during TLS handshake.

19. 7.5CVE-2023-26150EPSS 0.5%2023-10-03

    Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue is a result of missing checks for servic…

20. 8.8CVE-2023-42771EPSS 0.4%2023-10-03

    Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier, and ACERA 1310 firmware ver.01.26 and earlier allows a network-adjacent unauthenticated attacker who can access the affected product to download configuratio…

21. 7.5CVE-2023-5329EPSS 0.9%2023-10-02

    A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the component Web API. The manipulation leads to improper authentication. The exploit…

22. 8.8CVE-2023-5328EPSS 0.5%2023-10-02

    A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2. This affects an unknown part of the component Cookie Handler. The manipulation with the input auth=user,level1,settings; web=true leads to improper …

23. 8.8CVE-2023-5326EPSS 0.5%2023-10-01

    A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component WebConfig. The manipulation leads to improper authentication. The …

24. 8.1CVE-2023-43660EPSS 0.3%2023-09-27

    Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verification for a user can be bypassed by sending an SSH key offer without a signature. This allows bypassing authenticatio…

25. 9.8CVE-2023-42818EPSS 0.7%2023-09-27

    JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a discl…

26. 9.8CVE-2023-20252EPSS 1.1%2023-09-27

    A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized access to the application as an arbitrary user. This vu…

27. 9.1CVE-2023-44152EPSS 0.9%2023-09-27

    Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.

28. 5.4CVE-2023-41904EPSS 2.4%2023-09-27

    Zoho ManageEngine ADManager Plus before 7203 allows 2FA bypass (for AuthToken generation) in REST APIs.

29. 7.8CVE-2023-31015EPSS 0.2%2023-09-20

    NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code ex…

30. 8.2CVE-2023-4094EPSS 0.5%2023-09-19

    ARCONTE Aurea's authentication system, in its 1.5.0.0 version, could allow an attacker to make incorrect access requests in order to block each legitimate account and cause a denial of service. In addition, a resource has been identified t…

31. 9.8CVE-2023-0773EPSS 1.2%2023-09-19

    The vulnerability exists in Uniview IP Camera due to identification and authentication failure at its web-based management interface. A remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vuln…

32. 5.3CVE-2023-42442ExploitEPSS 63%2023-09-15

    JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session rep…

33. 4.3CVE-2023-41900EPSS 0.9%2023-09-15

    Jetty is a Java based web server and servlet engine. Versions 9.4.21 through 9.4.51, 10.0.15, and 11.0.15 are vulnerable to weak authentication. If a Jetty `OpenIdAuthenticator` uses the optional nested `LoginService`, and that `LoginServi…

34. 7.5CVE-2023-0813EPSS 0.9%2023-09-15

    A flaw was found in the Network Observability plugin for OpenShift console. Unless the Loki authToken configuration is set to FORWARD mode, authentication is no longer enforced, allowing any user who can connect to the OpenShift Console in…

35. 7.5CVE-2022-47848EPSS 1.0%2023-09-15

    An issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml …

36. 7.8CVE-2023-4985EPSS 0.4%2023-09-15

    A vulnerability classified as critical has been found in Supcon InPlant SCADA up to 20230901. Affected is an unknown function of the file Project.xml. The manipulation leads to improper authentication. An attack has to be approached locall…

37. 9.8CVE-2023-4669EPSS 1.2%2023-09-14

    Authentication Bypass by Assumed-Immutable Data vulnerability in Exagate SYSGuard 3001 allows Authentication Bypass. This issue affects SYSGuard 3001: before 3.2.20.0.

38. 6.5CVE-2023-4568ExploitEPSS 3.9%2023-09-13

    PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

39. 6.5CVE-2023-39215EPSS 1.1%2023-09-12

    Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.

40. 9.8CVE-2023-4501EPSS 0.8%2023-09-12

    User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enterprise Server (including product variants such as Enterprise Test Server), versio…

41. 5.4CVE-2023-29463EPSS 1.5%2023-09-12

    The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users …

42. 9.8CVE-2023-39069EPSS 0.9%2023-09-11

    An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authentication mechanism.

43. 8.8CVE-2023-4816EPSS 0.6%2023-09-11

    A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holde…

44. 9.8CVE-2021-27715EPSS 1.1%2023-09-08

    An issue was discovered in MoFi Network MOFI4500-4GXeLTE-V2 3.5.6-xnet-5052 allows attackers to bypass the authentication and execute arbitrary code via crafted HTTP request.

45. 9.8CVE-2023-20238EPSS 15%2023-09-06

    A vulnerability in the single sign-on (SSO) implementation of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to forge the credentials required t…

46. 5.3CVE-2023-4498EPSS 0.5%2023-09-06

    Tenda N300 Wireless N VDSL2 Modem Router allows unauthenticated access to pages that in turn should be accessible to authenticated users only

47. 8.8CVE-2023-37284EPSS 0.4%2023-09-06

    Improper authentication vulnerability in Archer C20 firmware versions prior to 'Archer C20(JP)_V1_230616' allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command via a crafted request to bypass authentication.

48. 5.5CVE-2023-30725EPSS 0.2%2023-09-06

    Improper authentication in LocalProvier of Gallery prior to version 14.5.01.2 allows attacker to access the data in content provider.

49. 3.3CVE-2023-30724EPSS 0.2%2023-09-06

    Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.

50. 7.5CVE-2023-30708EPSS 0.6%2023-09-06

    Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status.