CWE-287: Improper Authentication, page 54

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 7.5CVE-2018-18907EPSS 0.8%2022-06-16

   An issue was discovered on D-Link DIR-850L 1.21WW devices. A partially completed WPA handshake is sufficient for obtaining full access to the wireless network. A client can access the network by sending packets on Data Frames to the AP wit…

2. 7.5CVE-2022-29865EPSS 1.6%2022-06-16

   OPC UA .NET Standard Stack allows a remote attacker to bypass the application authentication check via crafted fake credentials.

3. 7.5CVE-2022-30150EPSS 3.4%2022-06-15

   Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

4. 7.5CVE-2022-21935EPSS 1.0%2022-06-15

   A vulnerability in Metasys ADS/ADX/OAS 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS 11 versions prior to 11.0.2 allows unverified password change.

5. 9.8CVE-2022-20798EPSS 1.5%2022-06-15

   A vulnerability in the external authentication functionality of Cisco Secure Email and Web Manager, formerly known as Cisco Security Management Appliance (SMA), and Cisco Email Security Appliance (ESA) could allow an unauthenticated, remot…

6. 9.8CVE-2022-20733EPSS 1.1%2022-06-15

   A vulnerability in the login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to log in without credentials and access all roles without any restrictions. This vulnerability is due to exposed sen…

7. 8.6CVE-2022-30229EPSS 0.8%2022-06-14

   A vulnerability has been identified in SICAM GridEdge (Classic) (All versions < V2.6.6). The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data o…

8. 7.8CVE-2021-35094EPSS 0.2%2022-06-14

   Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

9. 6.8CVE-2022-22259EPSS 0.2%2022-06-13

   There is an improper authentication vulnerability in FLMG-10 10.0.1.0(H100SP22C00). Successful exploitation of this vulnerability may lead to a control of the victim device.

10. 7.8CVE-2022-30749EPSS 0.2%2022-06-07

    Improper access control vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to add arbitrary smart devices by bypassing login activity.

11. 9.8CVE-2020-36533EPSS 1.5%2022-06-07

    A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulation leads to weak authentication. The attack may be initiated remotely.

12. 6.5CVE-2020-36528EPSS 0.8%2022-06-07

    A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to …

13. 8.8CVE-2022-30238EPSS 1.0%2022-06-02

    A CWE-287: Improper Authentication vulnerability exists that could allow an attacker to take over the admin account when an attacker hijacks a session. Affected Products: Wiser Smart, EER21000 & EER21001 (V4.5 and prior)

14. 7.1CVE-2022-31463EPSS 1.0%2022-06-02

    Owl Labs Meeting Owl 5.2.0.15 does not require a password for Bluetooth commands, because only client-side authentication is used.

15. 8.6CVE-2022-30034EPSS 1.1%2022-06-02

    Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny ser…

16. 7.5CVE-2022-26975EPSS 1.0%2022-06-02

    Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.

17. 9.8CVE-2022-31013EPSS 1.5%2022-05-31

    Chat Server is the chat server for Vartalap, an open-source messaging application. Versions 2.3.2 until 2.6.0 suffer from a bug in validating the access token, resulting in authentication bypass. The function `this.authProvider.verifyAcces…

18. 7.8CVE-2022-31011EPSS 0.3%2022-05-31

    TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication proces…

19. 5.5CVE-2022-26724EPSS 0.2%2022-05-26

    An authentication issue was addressed with improved state management. This issue is fixed in tvOS 15.5. A local user may be able to enable iCloud Photos without authentication.

20. 8.1CVE-2022-22576EPSS 2.5%2022-05-26

    An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as…

21. 6.8CVE-2022-26865EPSS 0.3%2022-05-26

    Dell Support Assist OS Recovery versions before 5.5.2 contain an Authentication Bypass vulnerability. An unauthenticated attacker with physical access to the system may exploit this vulnerability by bypassing OS Recovery authentication in …

22. 9.8CVE-2022-24422EPSS 59%2022-05-26

    Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the VNC Console.

23. 7.5CVE-2021-4230EPSS 1.0%2022-05-24

    A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL backup handler. An attacker is able to get access to sensitive data without proper authentication. …

24. 9.8CVE-2013-10004EPSS 1.0%2022-05-24

    A vulnerability classified as critical was found in Telecommunication Software SAMwin Contact Center Suite 5.1. This vulnerability affects the function passwordScramble in the library SAMwinLIBVB.dll of the component Password Handler. Inco…

25. 5.4CVE-2022-29237EPSS 0.6%2022-05-24

    Opencast is a free and open source solution for automated video capture and distribution at scale. Prior to Opencast 10.14 and 11.7, users could pass along URLs for files belonging to organizations other than the user's own, which Opencast…

26. 6.5CVE-2022-0910EPSS 0.7%2022-05-24

    A downgrade from two-factor authentication to one-factor authentication vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.32 through 4.71, USG FLEX series firmware versions 4.50 through 5.21, ATP series firmwa…

27. 10.0CVE-2022-29165EPSS 2.1%2022-05-20

    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A critical vulnerability has been discovered in Argo CD starting with version 1.4.0 and prior to versions 2.1.15, 2.2.9, and 2.3.4 which would allow unauthenticated …

28. 7.2CVE-2021-30028EPSS 1.4%2022-05-20

    SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use default credentials (the admin password for the admin account) to access the TELNET service, allowing attackers to erase/read/write the firmware remotely.

29. 6.9CVE-2022-29883EPSS 1.0%2022-05-20

    A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not restrict unauthenticated access to certain pages of the web interface. This could allow an attacker to delete log files without authentication.

30. 9.8CVE-2022-28106EPSS 1.2%2022-05-20

    Online Sports Complex Booking System v1.0 was discovered to allow attackers to take over user accounts via a crafted POST request.

31. 6.8CVE-2021-42849EPSS 0.2%2022-05-18

    A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.

32. 7.5CVE-2022-28955ExploitEPSS 40%2022-05-18

    An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

33. 4.3CVE-2022-1349EPSS 0.7%2022-05-16

    The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not validate that the value passed to the image_id parameter of the ajax action wpqa_remove_image belongs to the requesting user…

34. 9.8CVE-2022-22796EPSS 1.4%2022-05-12

    Sysaid – Sysaid System Takeover - An attacker can bypass the authentication process by accessing to: /wmiwizard.jsp, Then to: /ConcurrentLogin.jsp, then click on the login button, and it will redirect you to /home.jsp without any authentic…

35. 4.4CVE-2021-33083EPSS 0.3%2022-05-12

    Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow an privileged user to potentially enable information disclosure via local access.

36. 7.2CVE-2021-0193EPSS 1.0%2022-05-12

    Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access.

37. 7.2CVE-2022-1681EPSS 2.0%2022-05-12

    Authentication Bypass Using an Alternate Path or Channel in GitHub repository requarks/wiki prior to 2.5.281. User can get root user permissions

38. 3.7CVE-2022-1426EPSS 0.9%2022-05-11

    An issue has been discovered in GitLab affecting all versions starting from 12.6 before 14.8.6, all versions starting from 14.9 before 14.9.4, all versions starting from 14.10 before 14.10.1. GitLab was not correctly authenticating a user …

39. 9.8CVE-2019-12254EPSS 1.3%2022-05-06

    In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a unauthenticated user with limited access rights. Based on the …

40. 8.1CVE-2021-26253EPSS 0.8%2022-05-06

    A potential vulnerability in Splunk Enterprise's implementation of DUO MFA allows for bypassing the MFA verification in Splunk Enterprise versions before 8.1.6. The potential vulnerability impacts Splunk Enterprise instances configured to …

41. 8.8CVE-2022-21934EPSS 1.0%2022-05-06

    Under certain circumstances an authenticated user could lock other users out of the system or take over their accounts in Metasys ADS/ADX/OAS server 10 versions prior to 10.1.5 and Metasys ADS/ADX/OAS server 11 versions prior to 11.0.2.

42. 9.8CVE-2021-44057EPSS 0.9%2022-05-05

    An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in…

43. 9.8CVE-2021-44056EPSS 0.9%2022-05-05

    An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in…

44. 7.5CVE-2022-24901EPSS 0.7%2022-05-04

    Improper validation of the Apple certificate URL in the Apple Game Center authentication adapter allows attackers to bypass authentication, making the server vulnerable to DoS attacks. The vulnerability has been fixed by improving the URL …

45. 3.3CVE-2022-28790EPSS 0.2%2022-05-03

    Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device. The patch adds proper caller signature check logic.

46. 8.8CVE-2022-0916EPSS 0.4%2022-05-03

    An issue was discovered in Logitech Options. The OAuth 2.0 state parameter was not properly validated. This leaves applications vulnerable to CSRF attacks during authentication and authorization operations.

47. 7.7CVE-2022-23723EPSS 0.9%2022-05-02

    An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used as part of an authentication flow.

48. 6.5CVE-2022-23722EPSS 0.6%2022-05-02

    When a password reset mechanism is configured to use the Authentication API with an Authentication Policy, email One-Time Password, PingID or SMS authentication, an existing user can reset another existing user’s password.

49. 5.6CVE-2021-41992EPSS 0.5%2022-04-30

    A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

50. 4.3CVE-2022-0985EPSS 0.6%2022-04-29

    Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.