CWE-287: Improper Authentication, page 71

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 9.1CVE-2019-18322EPSS 1.2%2019-12-12

   A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically…

2. 9.1CVE-2019-18321EPSS 1.2%2019-12-12

   A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to read and write arbitrary files on the local file system by sending specifically…

3. 7.5CVE-2019-18320EPSS 1.1%2019-12-12

   A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could be able to upload arbitrary files without authentication. Please n…

4. 7.5CVE-2019-18319EPSS 1.1%2019-12-12

   A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafte…

5. 7.5CVE-2019-18318EPSS 1.1%2019-12-12

   A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server can cause a Denial-of-Service condition by sending specifically crafted …

6. 7.5CVE-2019-18317EPSS 1.1%2019-12-12

   A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could cause a Denial-of-Service condition by sending specifically crafte…

7. 9.8CVE-2019-18315EPSS 2.5%2019-12-12

   A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted packets…

8. 9.8CVE-2019-18314EPSS 2.3%2019-12-12

   A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). An attacker with network access to the Application Server could gain remote code execution by sending specifically crafted objects…

9. 5.3CVE-2019-18312EPSS 1.1%2019-12-12

   A vulnerability has been identified in SPPA-T3000 MS3000 Migration Server (All versions). An attacker with network access to the MS3000 Server could be able to enumerate running RPC services. Please note that an attacker needs to have netw…

10. 5.3CVE-2019-18287EPSS 1.6%2019-12-12

    A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent fr…

11. 5.3CVE-2019-18286EPSS 1.6%2019-12-12

    A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The Application Server exposes directory listings and files containing sensitive information. This vulnerability is independent fr…

12. 9.8CVE-2019-18284EPSS 2.0%2019-12-12

    A vulnerability has been identified in SPPA-T3000 Application Server (All versions < Service Pack R8.2 SP2). The AdminService is available without authentication on the Application Server. An attacker can use methods exposed via this inter…

13. 7.5CVE-2013-4593EPSS 1.8%2019-12-11

    RubyGem omniauth-facebook has an access token security vulnerability

14. 5.4CVE-2019-14870EPSS 2.7%2019-12-10

    All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained deleg…

15. 9.8CVE-2013-2159EPSS 2.8%2019-12-10

    Monkey HTTP Daemon: broken user name authentication

16. 6.5CVE-2019-18380EPSS 0.6%2019-12-09

    Symantec Industrial Control System Protection (ICSP), versions 6.x.x, may be susceptible to an unauthorized access issue that could potentially allow a threat actor to create or modify application user accounts without proper authenticatio…

17. 9.6CVE-2019-15897EPSS 3.0%2019-12-05

    beegfs-ctl in ThinkParQ BeeGFS through 7.1.3 allows Authentication Bypass via communication with a BeeGFS metadata server (which is typically not exposed to external networks).

18. 7.8CVE-2019-17437EPSS 0.3%2019-12-05

    An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 …

19. 9.8CVE-2019-14910EPSS 1.1%2019-12-05

    A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server (ldaps), in this case user authentication succeeds even if invalid password has e…

20. 8.8CVE-2019-19598EPSS 3.5%2019-12-05

    D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestamp value. In HTTP requests, part of the HNAP_AUTH header is the timestamp used to determine the tim…

21. 9.8CVE-2019-19521EPSS 2.7%2019-12-05

    libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth_subr.c and gen/authenticate.c in libc (and login/login.c and xenocara/app/xenodm/greete…

22. 7.8CVE-2019-19519EPSS 0.4%2019-12-05

    In OpenBSD 6.6, local users can use the su -L option to achieve any login class (often excluding root) because there is a logic error in the main function in su/su.c.

23. 8.3CVE-2019-14909EPSS 1.1%2019-12-04

    A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be accepted.

24. 5.3CVE-2019-19507EPSS 1.0%2019-12-02

    In jpv (aka Json Pattern Validator) before 2.1.1, compareCommon() can be bypassed because certain internal attributes can be overwritten via a conflicting name, as demonstrated by 'constructor': {'name':'Array'}. This affects validate(). H…

25. 9.8CVE-2019-12394EPSS 2.1%2019-12-02

    Anviz access control devices allow unverified password change which allows remote attackers to change the administrator password without prior authentication.

26. 8.8CVE-2019-5218EPSS 0.4%2019-11-29

    There is an insufficient authentication vulnerability in Huawei Band 2 and Honor Band 3. The band does not sufficiently authenticate the device try to connect to it in certain scenario. Successful exploit could allow the attacker to spoof …

27. 7.5CVE-2019-16201EPSS 5.1%2019-11-26

    WEBrick::HTTPAuth::DigestAuth in Ruby through 2.4.7, 2.5.x through 2.5.6, and 2.6.x through 2.6.4 has a regular expression Denial of Service cause by looping/backtracking. A victim must expose a WEBrick server that uses DigestAuth to the I…

28. 9.8CVE-2019-6675EPSS 0.9%2019-11-26

    BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with multiple servers are exposed to a vulnerability which allows an authentication bypass. This can result in a complete compromi…

29. 6.5CVE-2019-14856EPSS 1.7%2019-11-26

    ansible before versions 2.8.6, 2.7.14, 2.6.20 is vulnerable to a None

30. 5.3CVE-2019-15987EPSS 1.6%2019-11-26

    A vulnerability in web interface of the Cisco Webex Event Center, Cisco Webex Meeting Center, Cisco Webex Support Center, and Cisco Webex Training Center could allow an unauthenticated, remote attacker to guess account usernames. The vulne…

31. 9.8CVE-2019-18250EPSS 1.7%2019-11-26

    In all versions of ABB Power Generation Information Manager (PGIM) and Plant Connect, the affected product is vulnerable to authentication bypass, which may allow an attacker to remotely bypass authentication and extract credentials from t…

32. 9.8CVE-2019-18374EPSS 1.7%2019-11-25

    Symantec Critical System Protection (CSP), versions 8.0, 8.0 HF1 & 8.0 MP1, may be susceptible to an authentication bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing authenticat…

33. 6.8CVE-2019-16286EPSS 0.8%2019-11-22

    An attacker may be able to bypass the OS application filter meant to restrict applications that can be executed by changing browser preferences to launch a separate process that in turn can execute arbitrary commands.

34. 8.6CVE-2019-3654EPSS 0.7%2019-11-22

    Authentication Bypass vulnerability in the Microsoft Windows client in McAfee Client Proxy (MCP) prior to 3.0.0 allows local user to bypass scanning of web traffic and gain access to blocked sites for a short period of time via generating …

35. 7.5CVE-2014-2904EPSS 0.9%2019-11-21

    wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication.

36. 9.8CVE-2019-19006KEVEPSS 56%2019-11-21

    Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.

37. 9.1CVE-2019-15803EPSS 1.3%2019-11-14

    An issue was discovered on Zyxel GS1900 devices with firmware before 2.50(AAHH.0)C0. Through an undocumented sequence of keypresses, undocumented functionality is triggered. A diagnostics shell is triggered via CTRL-ALT-t, which prompts fo…

38. 9.8CVE-2013-3072EPSS 2.1%2019-11-14

    An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, causes the router to no longer require a pa…

39. 7.8CVE-2019-11170EPSS 0.4%2019-11-14

    Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure, escalation of privilege and/or denial of service via local access.

40. 9.8CVE-2013-3367EPSS 2.7%2019-11-13

    Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3.

41. 8.8CVE-2019-5233EPSS 0.9%2019-11-13

    Huawei smartphones with versions earlier than Taurus-AL00B 10.0.0.41(SP2C00E41R3P2) have an improper authentication vulnerability. Successful exploitation may cause the attacker to access specific components.

42. 2.4CVE-2019-5213EPSS 0.2%2019-11-12

    Honor play smartphones with versions earlier than Cornell-AL00A 9.1.0.321(C00E320R1P1T8) have an insufficient authentication vulnerability. The system has a logic judge error under certain scenario. Successful exploit could allow the attac…

43. 7.5CVE-2019-18848EPSS 1.3%2019-11-12

    The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.

44. 4.6CVE-2019-13531EPSS 0.4%2019-11-08

    In Medtronic Valleylab FT10 Energy Platform (VLFT10GEN) version 2.1.0 and lower and version 2.0.3 and lower, and Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States) version 1.20.2 and lower, the RFID security mech…

45. 9.8CVE-2011-4628EPSS 1.6%2019-11-06

    TYPO3 before 4.3.12, 4.4.x before 4.4.9, and 4.5.x before 4.5.4 allows remote attackers to bypass authentication mechanisms in the backend through a crafted request.

46. 6.5CVE-2019-8108EPSS 1.2%2019-11-05

    Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can manipulate session validation setting for a storefront that leads to inse…

47. 5.9CVE-2013-5123ExploitEPSS 8.0%2019-11-05

    The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.

48. 5.3CVE-2019-1980EPSS 1.0%2019-11-05

    A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to by…

49. 6.5CVE-2019-1877EPSS 1.4%2019-11-05

    A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the …

50. 7.5CVE-2019-18661EPSS 1.5%2019-11-02

    Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web page…