CWE-287: Improper Authentication, page 58

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 7.5CVE-2021-43175EPSS 1.2%2021-12-07

   The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 exposes an API router that accepts a username, password, and action that routes to other PHP files that implement the various API functions. Vulnerable versions of GOaut…

2. 7.5CVE-2021-37100EPSS 0.7%2021-12-07

   There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed.

3. 7.5CVE-2021-37043EPSS 0.7%2021-12-07

   There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious application processes occupy system resources.

4. 9.8CVE-2021-43931EPSS 1.5%2021-12-06

   The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

5. 9.8CVE-2021-39890EPSS 1.1%2021-12-06

   It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above.

6. 7.5CVE-2021-43786EPSS 2.4%2021-11-29

   Nodebb is an open source Node.js based forum software. In affected versions incorrect logic present in the token verification step unintentionally allowed master token access to the API. The vulnerability has been patch as of v1.18.5. User…

7. 8.8CVE-2021-38686EPSS 1.0%2021-11-26

   An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the followin…

8. 7.8CVE-2021-35033EPSS 0.4%2021-11-23

   A vulnerability in specific versions of Zyxel NBG6818, NBG7815, WSQ20, WSQ50, WSQ60, and WSR30 firmware with pre-configured password management could allow an attacker to obtain root access of the device, if the local attacker dismantles t…

9. 5.3CVE-2021-38376EPSS 1.5%2021-11-22

   OX App Suite through 7.10.5 has Incorrect Access Control for retrieval of session information via the rampup action of the login API call.

10. 9.8CVE-2021-36308EPSS 3.3%2021-11-20

    Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on t…

11. 9.8CVE-2021-36306EPSS 3.7%2021-11-20

    Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affect…

12. 9.8CVE-2021-42338EPSS 5.8%2021-11-19

    4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload a…

13. 5.5CVE-2021-33087EPSS 0.2%2021-11-17

    Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access.

14. 7.8CVE-2021-0096EPSS 0.2%2021-11-17

    Improper authentication in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via loc…

15. 9.8CVE-2021-37580ExploitEPSS 42%2021-11-16

    A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0

16. 6.8CVE-2021-3788EPSS 0.2%2021-11-12

    An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras that could allow an attacker with physical access unauthorized access to the device.

17. 6.8CVE-2021-3519EPSS 0.2%2021-11-12

    A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

18. 7.5CVE-2021-43203EPSS 0.9%2021-11-09

    In JetBrains Ktor before 1.6.4, nonce verification during the OAuth2 authentication process is implemented improperly.

19. 8.1CVE-2021-24647ExploitEPSS 9.8%2021-11-08

    The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as an…

20. 8.8CVE-2021-42072EPSS 1.7%2021-11-08

    An issue was discovered in Barrier before 2.4.0. The barriers component (aka the server-side implementation of Barrier) does not sufficiently verify the identify of connecting clients. Clients can thus exploit weaknesses in the provided pr…

21. 7.5CVE-2021-31602ExploitEPSS 52%2021-11-08

    An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which i…

22. 7.0CVE-2021-43414EPSS 0.3%2021-11-07

    An issue was discovered in GNU Hurd before 0.9 20210404-9. The use of an authentication protocol in the proc server is vulnerable to man-in-the-middle attacks, which can be exploited for local privilege escalation to get full root access.

23. 9.8CVE-2021-42837EPSS 1.2%2021-11-05

    An issue was discovered in Talend Data Catalog before 7.3-20210930. After setting up SAML/OAuth, authentication is not correctly enforced on the native login page. Any valid user from the SAML/OAuth provider can be used as the username wit…

24. 5.5CVE-2021-25506EPSS 0.2%2021-11-05

    Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service.

25. 7.8CVE-2021-25505EPSS 0.6%2021-11-05

    Improper authentication in Samsung Pass prior to 3.0.02.4 allows to use app without authentication when lockscreen is unlocked.

26. 8.1CVE-2021-38161EPSS 1.9%2021-11-03

    Improper Authentication vulnerability in TLS origin verification of Apache Traffic Server allows for man in the middle attacks. This issue affects Apache Traffic Server 8.0.0 to 8.0.8.

27. 4.3CVE-2021-33210EPSS 0.8%2021-11-03

    An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant.

28. 7.5CVE-2021-41312EPSS 1.2%2021-11-03

    Affected versions of Atlassian Jira Server and Data Center allow a remote attacker who has had their access revoked from Jira Service Management to enable and disable Issue Collectors on Jira Service Management projects via an Improper Aut…

29. 5.3CVE-2021-22490EPSS 0.6%2021-10-28

    There is a Permission verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect the device performance.

30. 7.5CVE-2021-22473EPSS 0.7%2021-10-28

    There is an Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

31. 5.3CVE-2021-32951EPSS 0.9%2021-10-27

    WebAccess/NMS (Versions prior to v3.0.3_Build6299) has an improper authentication vulnerability, which may allow unauthorized users to view resources monitored and controlled by the WebAccess/NMS, as well as IP addresses and names of all t…

32. 5.3CVE-2021-41157EPSS 1.7%2021-10-26

    FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. By default, SIP requests of the type SUBSCRIBE are not a…

33. 7.5CVE-2021-37624EPSS 3.8%2021-10-25

    FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, FreeSWITCH does not authenticat…

34. 4.6CVE-2020-23058EPSS 0.4%2021-10-22

    An issue in the authentication mechanism in Nong Ge File Explorer v1.4 unauthenticated allows to access sensitive data.

35. 7.5CVE-2021-30312EPSS 0.6%2021-10-20

    Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sna…

36. 7.5CVE-2021-30302EPSS 0.7%2021-10-20

    Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon…

37. 9.8CVE-2021-31349EPSS 1.7%2021-10-19

    The usage of an internal HTTP header created an authentication bypass vulnerability (CWE-287), allowing an attacker to view internal files, change settings, manipulate services and execute arbitrary code. This issue affects all Juniper Net…

38. 5.5CVE-2010-2496EPSS 0.2%2021-10-18

    stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue…

39. 9.8CVE-2021-37123EPSS 0.8%2021-10-11

    There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful ex…

40. 8.1CVE-2021-41129EPSS 1.8%2021-10-06

    Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. A malicious user can modify the contents of a `confirmation_token` input during the two-factor authentication process to reference a cache value no…

41. 7.2CVE-2021-41126EPSS 1.1%2021-10-06

    October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework. In affected versions administrator accounts which had previously been deleted may still be able to sign in to the backend using October C…

42. 6.0CVE-2021-25490EPSS 0.8%2021-10-06

    A keyblob downgrade attack in keymaster prior to SMR Oct-2021 Release 1 allows attacker to trigger IV reuse vulnerability with privileged process.

43. 3.3CVE-2021-25484EPSS 0.1%2021-10-06

    Improper authentication in InputManagerService prior to SMR Oct-2021 Release 1 allows monitoring the touch event.

44. 7.8CVE-2021-0595EPSS 0.2%2021-10-06

    In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges need…

45. 7.3CVE-2021-39226KEVExploitEPSS >99.9%2021-10-05

    Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /ap…

46. 7.8CVE-2021-41286EPSS 0.2%2021-10-05

    Omikron MultiCash Desktop 4.00.008.SP5 relies on a client-side authentication mechanism. When a user logs into the application, the validity of the password is checked locally. All communication to the database backend is made via the same…

47. 6.5CVE-2021-39872EPSS 1.0%2021-10-05

    In all versions of GitLab CE/EE since version 14.1, an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration.

48. 9.8CVE-2021-23857EPSS 1.2%2021-10-04

    Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.

49. 9.8CVE-2021-35296EPSS 2.0%2021-10-04

    An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path.

50. 9.8CVE-2021-20578EPSS 1.0%2021-09-30

    IBM Cloud Pak for Security (CP4S) 1.7.0.0, 1.7.1.0, 1.7.2.0, and 1.8.0.0 could allow an attacker to perform unauthorized actions due to improper or missing authentication controls. IBM X-Force ID: 199282.