CWE-287: Improper Authentication, page 59

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 4.3CVE-2021-24017EPSS 0.6%2021-09-30

   An improper authentication in Fortinet FortiManager version 6.4.3 and below, 6.2.6 and below allows attacker to assign arbitrary Policy and Object modules via crafted requests to the request handler.

2. 9.1CVE-2021-41292EPSS 1.2%2021-09-30

   ECOA BAS controller suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can remotely bypass authentication and disclose sensitive information and circumvent physical access controls in …

3. 9.8CVE-2021-35943EPSS 1.1%2021-09-29

   Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513.

4. 9.8CVE-2021-38299EPSS 1.8%2021-09-27

   Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control. An attacker that controls a user's system is able to login to a vulnerable service using an attached FIDO2 authenticator without passing a check of the user presence.

5. 7.5CVE-2021-31606EPSS 2.5%2021-09-27

   furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.

6. 8.0CVE-2021-41503EPSS 0.4%2021-09-24

   DCS-5000L v1.05 and DCS-932L v2.17 and older are affecged by Incorrect Acess Control. The use of the basic authentication for the devices command interface allows attack vectors that may compromise the cameras configuration and allow malic…

7. 9.8CVE-2021-22869EPSS 1.2%2021-09-24

   An improper access control vulnerability in GitHub Enterprise Server allowed a workflow job to execute in a self-hosted runner group it should not have had access to. This affects customers using self-hosted runner groups for access contro…

8. 9.8CVE-2021-31917EPSS 1.3%2021-09-21

   A flaw was found in Red Hat DataGrid 8.x (8.0.0, 8.0.1, 8.1.0 and 8.1.1) and Infinispan (10.0.0 through 12.0.0). An attacker could bypass authentication on all REST endpoints when DIGEST is used as the authentication method. The highest th…

9. 9.8CVE-2021-38412EPSS 1.3%2021-09-17

   Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable …

10. 9.8CVE-2021-41317EPSS 1.8%2021-09-17

    XSS Hunter Express before 2021-09-17 does not properly enforce authentication requirements for paths.

11. 9.8CVE-2021-41303EPSS 76%2021-09-17

    Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.

12. 9.8CVE-2021-33045KEVExploitEPSS 99.5%2021-09-15

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

13. 9.8CVE-2021-33044KEVExploitEPSS >99.9%2021-09-15

    The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.

14. 7.8CVE-2021-33700EPSS 0.2%2021-09-15

    SAP Business One, version - 10.0, allows a local attacker with access to the victim's browser under certain circumstances, to login as the victim without knowing his/her password. The attacker could so obtain highly sensitive information w…

15. 7.5CVE-2021-39215EPSS 1.2%2021-09-15

    Jitsi Meet is an open source video conferencing application. In versions prior to 2.0.5963, a Prosody module allows the use of symmetrical algorithms to validate JSON web tokens. This means that tokens generated by arbitrary sources can be…

16. 6.7CVE-2021-3145EPSS 0.5%2021-09-10

    In Ionic Identity Vault before 5, a local root attacker on an Android device can bypass biometric authentication.

17. 7.5CVE-2021-37414EPSS 5.5%2021-09-10

    Zoho ManageEngine DesktopCentral before 10.0.709 allows anyone to get a valid user's APIKEY without authentication.

18. 5.9CVE-2021-25466EPSS 0.8%2021-09-09

    Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.

19. 3.3CVE-2021-25451EPSS 0.2%2021-09-09

    A PendingIntent hijacking in NetworkPolicyManagerService prior to SMR Sep-2021 Release 1 allows attackers to get IMSI data.

20. 10.0CVE-2021-39296EPSS 3.0%2021-09-09

    In OpenBMC 2.9, crafted IPMI messages allow an attacker to bypass authentication and gain full control of the system.

21. 9.8CVE-2021-28495EPSS 0.9%2021-09-09

    In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, user authentication can be bypassed when API access is enabled via the JSON-RPC APIs. This issue affects: Arista Me…

22. 8.8CVE-2021-28494EPSS 0.9%2021-09-09

    In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, authentication is bypassed by unprivileged users who are accessing the Web UI. This issue affects: Arista Metamako …

23. 7.8CVE-2021-28493EPSS 0.2%2021-09-09

    In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metam…

24. 4.9CVE-2021-34786EPSS 1.0%2021-09-09

    Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.

25. 7.2CVE-2021-34785EPSS 1.3%2021-09-09

    Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system.

26. 7.8CVE-2021-30605EPSS 0.1%2021-09-08

    Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

27. 4.6CVE-2021-30702EPSS 0.3%2021-09-08

    A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A person with physical access to a Mac may be able to bypass Login W…

28. 4.6CVE-2021-30668EPSS 0.3%2021-09-08

    This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.4. A person with physical access to a Mac may be able to bypass Login Window during a software update.

29. 5.4CVE-2021-30667EPSS 0.4%2021-09-08

    A logic issue was addressed with improved validation. This issue is fixed in iOS 14.6 and iPadOS 14.6. An attacker in WiFi range may be able to force a client to use a less secure authentication mechanism.

30. 2.4CVE-2021-1863EPSS 0.3%2021-09-08

    An issue existed with authenticating the action triggered by an NFC tag. The issue was addressed with improved action authentication. This issue is fixed in iOS 14.5 and iPadOS 14.5. A person with physical access to an iOS device may be ab…

31. 5.5CVE-2021-30770EPSS 0.4%2021-09-08

    A logic issue was addressed with improved validation. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. An attacker that has already achieved kernel code execution may be able to bypass kernel memory mitigations.

32. 5.5CVE-2021-30769EPSS 1.1%2021-09-08

    A logic issue was addressed with improved state management. This issue is fixed in iOS 14.7, tvOS 14.7, watchOS 7.6. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication.

33. 5.4CVE-2021-30720EPSS 1.4%2021-09-08

    A logic issue was addressed with improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6 and iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, watchOS 7.5. A malicious website may be able to access restricted ports on arbitrary ser…

34. 7.5CVE-2020-11301EPSS 11%2021-09-08

    Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdr…

35. 9.8CVE-2020-11264EPSS 13%2021-09-08

    Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivi…

36. 6.5CVE-2021-39196EPSS 1.3%2021-09-07

    pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequat…

37. 9.8CVE-2021-34746EPSS 18%2021-09-02

    A vulnerability in the TACACS+ authentication, authorization and accounting (AAA) feature of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to bypass authentication and log in to an aff…

38. 9.8CVE-2021-40350EPSS 1.6%2021-09-01

    webctrl.cgi.elf on Christie Digital DWU850-GS V06.46 devices allows attackers to perform any desired action via a crafted query containing an unspecified Cookie header. Authentication bypass can be achieved by including an administrative c…

39. 9.8CVE-2021-22002EPSS 1.2%2021-08-31

    VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with ho…

40. 9.6CVE-2021-22943EPSS 0.4%2021-08-31

    A vulnerability found in UniFi Protect application V1.18.1 and earlier permits a malicious actor who has already gained access to a network to subsequently control the Protect camera(s) assigned to said network. This vulnerability is fixed…

41. 8.1CVE-2021-34578EPSS 1.0%2021-08-31

    This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

42. 9.8CVE-2021-39177EPSS 1.4%2021-08-30

    Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition. Versions of Geyser prior to 1.4.2-SNAPSHOT allow anyone that can connect to the server to forge a LoginPacket with manipulated JWT token allowing impersonat…

43. 9.8CVE-2021-37417EPSS 4.8%2021-08-30

    Zoho ManageEngine ADSelfService Plus version 6103 and prior allows CAPTCHA bypass due to improper parameter validation.

44. 7.5CVE-2021-36370EPSS 2.0%2021-08-30

    An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify it…

45. 9.8CVE-2021-32967EPSS 1.4%2021-08-30

    Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges.

46. 7.5CVE-2021-22025EPSS 0.8%2021-08-30

    The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can …

47. 6.5CVE-2021-39165ExploitEPSS 8.2%2021-08-26

    Cachet is an open source status page. With Cachet prior to and including 2.3.18, there is a SQL injection which is in the `SearchableTrait#scopeSearch()`. Attackers without authentication can utilize this vulnerability to exfiltrate sensit…

48. 9.1CVE-2021-32648KEVExploitEPSS 91%2021-08-26

    octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. Th…

49. 7.4CVE-2021-29487EPSS 0.9%2021-08-26

    octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can exploit this vulnerability to bypass authentication and takeover of and user account on an October CMS serv…

50. 5.5CVE-2021-30867EPSS 0.7%2021-08-24

    The issue was addressed with improved authentication. This issue is fixed in iOS 15 and iPadOS 15. A malicious application may be able to access photo metadata without needing permission to access photos.