CWE-287: Improper Authentication, page 56

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 9.8CVE-2021-45786EPSS 1.2%2022-03-16

   In maccms v10, an attacker can log in through /index.php/user/login in the "col" and "openid" parameters to gain privileges.

2. 7.5CVE-2022-24740EPSS 0.6%2022-03-14

   Volto is a ReactJS-based frontend for the Plone Content Management System. Between versions 14.0.0-alpha.5 and 15.0.0-alpha.0, a user could have their authentication cookie replaced with an authentication cookie from another user, effectiv…

3. 3.7CVE-2021-36368EPSS 1.7%2022-03-13

   An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option,…

4. 8.8CVE-2022-22729EPSS 0.9%2022-03-11

   CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets: CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM…

5. 5.5CVE-2022-25825EPSS 0.2%2022-03-10

   Improper access control vulnerability in Samsung Account prior to version 13.1.0.1 allows attackers to access to the authcode for sign-in.

6. 3.3CVE-2022-25817EPSS 0.1%2022-03-10

   Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent.

7. 4.6CVE-2022-25816EPSS 0.1%2022-03-10

   Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication

8. 7.8CVE-2022-24286EPSS 0.2%2022-03-10

   Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx before 3.00.3038 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority through a named pipe. In this case, the Named …

9. 7.8CVE-2022-24285EPSS 0.2%2022-03-10

   Acer Care Center 4.00.30xx before 4.00.3042 contains a local privilege escalation vulnerability. The user process communicates with a service of system authority called ACCsvc through a named pipe. In this case, the Named Pipe is also give…

10. 9.1CVE-2022-23383EPSS 1.2%2022-03-10

    YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulner…

11. 7.8CVE-2021-40376EPSS 0.4%2022-03-10

    otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP p…

12. 7.5CVE-2022-24748EPSS 0.8%2022-03-09

    Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In versions prior to 6.4.8.2 it is possible to modify customers and to create orders without App Permission. This issue is a result …

13. 9.1CVE-2022-0715EPSS 6.0%2022-03-09

    A CWE-287: Improper Authentication vulnerability exists that could cause an attacker to arbitrarily change the behavior of the UPS when a key is leaked and used to upload malicious firmware. Affected Product: APC Smart-UPS Family: SMT Seri…

14. 2.4CVE-2021-41181EPSS 0.3%2022-03-08

    Nextcloud talk is a self hosting messaging service. In versions prior to 12.3.0 the Nextcloud Android Talk application did not properly detect the lockscreen state when a call was incoming. If an attacker got physical access to the locked …

15. 7.4CVE-2022-24738EPSS 1.1%2022-03-07

    Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. In versions of evmos prior to 2.0.1 attackers are able to drain unclaimed funds from user addresses. To do this an attacker must create a new chain which does not enfor…

16. 7.8CVE-2022-23729EPSS 0.1%2022-03-04

    When the device is in factory state, it can be access the shell without adb authentication process. The LG ID is LVE-SMP-210010.

17. 9.8CVE-2022-0730EPSS 3.5%2022-03-03

    Under certain ldap conditions, Cacti authentication can be bypassed with certain credential types.

18. 7.8CVE-2022-0492KEVExploitEPSS 5.5%2022-03-03

    A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and…

19. 5.3CVE-2020-14504EPSS 1.3%2022-02-24

    The web interface of the 1734-AENTR communication module mishandles authentication for HTTP POST requests. A remote, unauthenticated attacker can send a crafted request that may allow for modification of the configuration settings.

20. 7.5CVE-2022-23635EPSS 1.7%2022-02-22

    Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `istiod`, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted messa…

21. 6.5CVE-2022-23654EPSS 0.7%2022-02-22

    Wiki.js is a wiki app built on Node.js. In affected versions an authenticated user with write access on a restricted set of paths can update a page outside the allowed paths by specifying a different target page ID while keeping the path i…

22. 8.8CVE-2022-23652EPSS 1.4%2022-02-22

    capsule-proxy is a reverse proxy for Capsule Operator which provides multi-tenancy in Kubernetes. In versions prior to 0.2.1 an attacker with a proper authentication mechanism may use a malicious `Connection` header to start a privilege es…

23. 9.8CVE-2022-24047EPSS 1.9%2022-02-18

    This vulnerability allows remote attackers to bypass authentication on affected installations of BMC Track-It! 20.21.01.102. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of…

24. 9.8CVE-2022-21196EPSS 3.7%2022-02-18

    MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An att…

25. 7.2CVE-2020-25719EPSS 1.7%2022-02-18

    A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerbero…

26. 5.9CVE-2016-2124EPSS 1.8%2022-02-18

    A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

27. 7.5CVE-2022-23317EPSS 1.1%2022-02-15

    CobaltStrike <=4.5 HTTP(S) listener does not determine whether the request URL begins with "/", and attackers can obtain relevant information by specifying the URL.

28. 9.8CVE-2021-4201EPSS 2.0%2022-02-14

    Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access …

29. 7.5CVE-2021-45347EPSS 1.2%2022-02-14

    An Incorrect Access Control vulnerability exists in zzcms 8.2, which lets a malicious user bypass authentication by changing the user name in the cookie to use any password.

30. 9.1CVE-2022-24976EPSS 1.8%2022-02-14

    Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence.

31. 7.8CVE-2021-22796EPSS 1.2%2022-02-11

    A CWE-287: Improper Authentication vulnerability exists that could allow remote code execution when a malicious file is uploaded. Affected Product: C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior)

32. 9.8CVE-2021-38679EPSS 0.7%2022-02-11

    An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the…

33. 7.8CVE-2021-30317EPSS 1.4%2022-02-11

    Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Sn…

34. 9.8CVE-2021-45331EPSS 1.4%2022-02-09

    An Authentication Bypass vulnerability exists in Gitea before 1.5.0, which could let a malicious user gain privileges. If captured, the TOTP code for the 2FA can be submitted correctly more than once.

35. 7.5CVE-2022-23320EPSS 1.6%2022-02-07

    XMPie uStore 12.3.7244.0 allows for administrators to generate reports based on raw SQL queries. Since the application ships with default administrative credentials, an attacker may authenticate into the application and exfiltrate sensitiv…

36. 8.8CVE-2022-24551EPSS 0.9%2022-02-06

    A flaw was found in StarWind Stack. The endpoint for setting a new password doesn’t check the current username and old password. An attacker could reset any local user password (including system/administrator user) using any available user…

37. 9.8CVE-2022-22831ExploitEPSS 11%2022-02-06

    An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header.

38. 6.5CVE-2022-23600EPSS 0.9%2022-02-04

    fleet is an open source device management, built on osquery. Versions prior to 4.9.1 expose a limited ability to spoof SAML authentication with missing audience verification. This impacts deployments using SAML SSO in two specific cases: 1…

39. 9.8CVE-2021-28503EPSS 0.7%2022-02-04

    The impact of this vulnerability is that Arista's EOS eAPI may skip re-evaluating user credentials when certificate based authentication is used, which allows remote attackers to access the device via eAPI.

40. 9.3CVE-2021-21965EPSS 1.0%2022-02-04

    A denial of service vulnerability exists in the SeaMax remote configuration functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. Specially-crafted network packets can lead to denial of service. An attacker can send a malicious …

41. 9.8CVE-2022-24259EPSS 2.0%2022-02-04

    An incorrect check in the component cdr.php of Voipmonitor GUI before v24.96 allows unauthenticated attackers to escalate privileges via a crafted request.

42. 6.5CVE-2021-40404EPSS 1.2%2022-01-28

    An authentication bypass vulnerability exists in the cgiserver.cgi Login functionality of reolink RLC-410W v3.0.0.136_20121102. A specially-crafted HTTP request can lead to authentication bypass. An attacker can send an HTTP request to tri…

43. 5.3CVE-2021-36346EPSS 4.2%2022-01-25

    Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to deny access to the iDRAC webserver.

44. 8.8CVE-2021-34865EPSS 3.1%2022-01-25

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of multiple NETGEAR routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_htt…

45. 9.1CVE-2021-3850EPSS 2.2%2022-01-25

    Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.

46. 9.8CVE-2021-43394EPSS 1.2%2022-01-24

    Unisys OS 2200 Messaging Integration Services (NTSI) 7R3B IC3 and IC4, 7R3C, and 7R3D has an Incorrect Implementation of an Authentication Algorithm. An LDAP password is not properly validated.

47. 9.8CVE-2022-23126EPSS 2.2%2022-01-24

    TeslaMate before 1.25.1 (when using the default Docker configuration) allows attackers to open doors of Tesla vehicles, start Keyless Driving, and interfere with vehicle operation en route. This occurs because an attacker can leverage Graf…

48. 4.3CVE-2022-23807EPSS 0.7%2022-01-22

    An issue was discovered in phpMyAdmin 4.9 before 4.9.8 and 5.1 before 5.1.2. A valid user who is already authenticated to phpMyAdmin can manipulate their account to bypass two-factor authentication for future login instances.

49. 9.8CVE-2021-43355EPSS 1.0%2022-01-21

    Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 allows user input to be validated on the client side without authentication by the server. The server should not rely on the correctness of the data because users…

50. 9.8CVE-2021-23196EPSS 0.9%2022-01-21

    The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.