CWE-287: Improper Authentication, page 57

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 9.8CVE-2020-4879EPSS 1.5%2022-01-21

   IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847.

2. 9.8CVE-2021-44736EPSS 2.2%2022-01-20

   The initial admin account setup wizard on Lexmark devices allow unauthenticated access to the “out of service erase” feature.

3. 4.3CVE-2022-21692EPSS 0.8%2022-01-18

   OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised …

4. 5.3CVE-2022-21695EPSS 0.9%2022-01-18

   OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions authenticated users (or unauthenticated in public mode) can send message…

5. 8.8CVE-2021-25036EPSS 3.0%2022-01-17

   The All in One SEO WordPress plugin before 4.1.5.3 is affected by a Privilege Escalation issue, which was discovered during an internal audit by the Jetpack Scan team, and may grant bad actors access to protected REST API endpoints they sh…

6. 9.8CVE-2022-23178ExploitEPSS 75%2022-01-15

   An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interfac…

7. 9.8CVE-2021-34993EPSS 5.4%2022-01-13

   This vulnerability allows remote attackers to bypass authentication on affected installations of Commvault CommCell 11.22.22. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CVSearchService…

8. 8.8CVE-2021-34977EPSS 1.1%2022-01-13

   This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7000 1.0.11.116_10.2.100 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists wi…

9. 8.8CVE-2022-22990EPSS 2.1%2022-01-13

   A limited authentication bypass vulnerability was discovered that could allow an attacker to achieve remote code execution and escalate privileges on the My Cloud devices. Addressed this vulnerability by changing access token validation lo…

10. 8.8CVE-2022-21684EPSS 0.8%2022-01-13

    Discourse is an open source discussion platform. Versions prior to 2.7.13 in `stable`, 2.8.0.beta11 in `beta`, and 2.8.0.beta11 in `tests-passed` allow some users to log in to a community before they should be able to do so. A user invited…

11. 9.8CVE-2021-33046EPSS 1.3%2022-01-13

    Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.

12. 5.3CVE-2022-23134KEVExploitEPSS 94%2022-01-13

    After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Fro…

13. 8.8CVE-2021-43999EPSS 1.8%2022-01-11

    Apache Guacamole 1.2.0 and 1.3.0 do not properly validate responses received from a SAML identity provider. If SAML support is enabled, this may allow a malicious user to assume the identity of another Guacamole user.

14. 9.6CVE-2021-44458EPSS 0.4%2022-01-10

    Linux users running Lens 5.2.6 and earlier could be compromised by visiting a malicious website. The malicious website could make websocket connections from the victim's browser to Lens and so operate the local terminal feature. This would…

15. 5.3CVE-2022-22289EPSS 0.8%2022-01-10

    Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information.

16. 5.5CVE-2022-22284EPSS 0.2%2022-01-10

    Improper authentication vulnerability in Samsung Internet prior to 16.0.2.19 allows attackers to bypass secret mode password authentication

17. 3.3CVE-2022-22283EPSS 0.2%2022-01-10

    Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App.

18. 9.8CVE-2021-45389EPSS 1.2%2022-01-04

    A flaw was found with the JWT token. A self-signed JWT token could be injected into the update manager and bypass the authentication process, thus could escalate privileges. This affects StarWind SAN and NAS build 1578 and StarWind Command…

19. 9.0CVE-2021-45917EPSS 0.5%2022-01-03

    The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-sid…

20. 6.8CVE-2021-23147EPSS 0.4%2021-12-30

    Netgear Nighthawk R6700 version 1.0.4.120 does not have sufficient protections for the UART console. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection and execute commands as t…

21. 6.8CVE-2021-20168EPSS 0.3%2021-12-30

    Netgear RAX43 version 1.0.3.96 does not have sufficient protections to the UART interface. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection, login with default credentials, an…

22. 6.8CVE-2021-20161EPSS 0.3%2021-12-30

    Trendnet AC2600 TEW-827DRU version 2.08B01 does not have sufficient protections for the UART functionality. A malicious actor with physical access to the device is able to connect to the UART port via a serial connection. No username or pa…

23. 8.8CVE-2021-45379EPSS 1.0%2021-12-30

    Glewlwyd 2.0.0, fixed in 2.6.1 is affected by an incorrect access control vulnerability. One user can attempt to log in as another user without its password.

24. 7.5CVE-2021-38688EPSS 0.8%2021-12-29

    An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following ve…

25. 9.8CVE-2021-45890EPSS 1.8%2021-12-27

    basic/BasicAuthProvider.java in AuthGuard before 0.9.0 allows authentication via an inactive identifier.

26. 9.8CVE-2021-21952EPSS 1.3%2021-12-22

    An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to increased privileges.

27. 8.1CVE-2021-21902EPSS 1.8%2021-12-22

    An authentication bypass vulnerability exists in the CMA run_server_6877 functionality of Garrett Metal Detectors iC Module CMA Version 5.0. A properly-timed network connection can lead to authentication bypass via session hijacking. An at…

28. 9.8CVE-2021-27451EPSS 0.9%2021-12-21

    Mesa Labs AmegaView Versions 3.0 and prior’s passcode is generated by an easily reversible algorithm, which may allow an attacker to gain access to the device.

29. 7.5CVE-2021-36350EPSS 1.1%2021-12-21

    Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authentication factors. A remote unauthenticated attacker may potentially exploit this vulnerability and bypass one of the fa…

30. 9.8CVE-2021-44525EPSS 3.5%2021-12-20

    Zoho ManageEngine PAM360 before build 5303 allows attackers to modify a few aspects of application state because of a filter bypass in which authentication is not required.

31. 9.8CVE-2021-44676EPSS 4.5%2021-12-20

    Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements (e.g., access control details) and modify a few aspects of the application state.

32. 9.8CVE-2021-44675EPSS 6.7%2021-12-20

    Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not required.

33. 7.5CVE-2021-40851EPSS 1.4%2021-12-17

    TCMAN GIM is vulnerable to a lack of authorization in all available webservice methods listed in /PC/WebService.asmx. The exploitation of this vulnerability might allow a remote attacker to obtain information.

34. 9.8CVE-2021-43834EPSS 1.0%2021-12-16

    eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows an attacker to authenticate as an existing user, if that user was created using a single sign-on authenticat…

35. 8.8CVE-2021-43833EPSS 0.8%2021-12-16

    eLabFTW is an electronic lab notebook manager for research teams. In versions prior to 4.2.0 there is a vulnerability which allows any authenticated user to gain access to arbitrary accounts by setting a specially crafted email address. Th…

36. 9.8CVE-2021-43935EPSS 1.1%2021-12-15

    The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the applicati…

37. 8.1CVE-2021-4073ExploitEPSS 6.8%2021-12-14

    The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login functi…

38. 5.3CVE-2021-44937EPSS 0.7%2021-12-14

    glFusion CMS v1.7.9 is affected by an arbitrary user registration vulnerability in /public_html/users.php. An attacker can register with the mailbox of any user. When users want to register, they will find that the mailbox has been occupie…

39. 9.8CVE-2021-44524EPSS 1.6%2021-12-14

    A vulnerability has been identified in SiPass integrated V2.76 (All versions), SiPass integrated V2.80 (All versions), SiPass integrated V2.85 (All versions), Siveillance Identity V1.5 (All versions), Siveillance Identity V1.6 (All version…

40. 7.5CVE-2021-39064EPSS 1.4%2021-12-13

    IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console. IBM X-Force ID: 214957.

41. 9.8CVE-2021-44514EPSS 5.5%2021-12-09

    OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories.

42. 8.8CVE-2021-41265EPSS 1.3%2021-12-09

    Flask-AppBuilder is a development framework built on top of Flask. Verions prior to 3.3.4 contain an improper authentication vulnerability in the REST API. The issue allows for a malicious actor with a carefully crafted request to successf…

43. 7.5CVE-2021-21955EPSS 1.0%2021-12-09

    An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Generic network sniffing can lead to password recovery. An attacker can sniff netwo…

44. 7.5CVE-2021-20145EPSS 1.3%2021-12-09

    Gryphon Tower routers contain an unprotected openvpn configuration file which can grant attackers access to the Gryphon homebound VPN network which exposes the LAN interfaces of other users' devices connected to the same service. An attack…

45. 8.1CVE-2021-43068EPSS 0.6%2021-12-09

    A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the second factor of authentication via a RADIUS login portal.

46. 6.5CVE-2021-36718EPSS 0.6%2021-12-08

    SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system with sensetive data (Employee name, Employee ID number, Working hours etc') The vulnerabilety has b…

47. 7.5CVE-2021-37054EPSS 0.7%2021-12-08

    There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

48. 7.5CVE-2021-41311EPSS 0.9%2021-12-08

    Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings, via a Broken Authentication vulnerability in the…

49. 5.3CVE-2021-41309EPSS 0.8%2021-12-08

    Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of another user's Jira Service Management project via a Broken Authentication vulnerabili…

50. 9.8CVE-2021-41716EPSS 1.4%2021-12-07

    Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function