CWE-287: Improper Authentication, page 83

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

What the weakness is: CWE-287 at MITRE

1. 10.0CVE-2017-13995EPSS 2.5%2017-10-05

   An Improper Authentication issue was discovered in iniNet Solutions iniNet Webserver, all versions prior to V2.02.0100. The webserver does not properly authenticate users, which may allow a malicious attacker to access sensitive informatio…

2. 4.3CVE-2017-1000110EPSS 0.7%2017-10-05

   Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. It did not properly check th…

3. 8.5CVE-2017-1000106EPSS 0.8%2017-10-05

   Blue Ocean allows the creation of GitHub organization folders that are set up to scan a GitHub organization for repositories and branches containing a Jenkinsfile, and create corresponding pipelines in Jenkins. Its SCM content REST API sup…

4. 9.8CVE-2017-12819EPSS 1.4%2017-10-04

   Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55.

5. 6.5CVE-2017-13984EPSS 2.0%2017-09-30

   An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal.

6. 9.8CVE-2017-13983EPSS 6.1%2017-09-30

   An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication.

7. 9.8CVE-2017-12236EPSS 3.1%2017-09-29

   A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote attacker using an x tunnel router to bypass authentication checks performed when reg…

8. 9.8CVE-2017-12229EPSS 5.2%2017-09-29

   A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote attacker to bypass authentication to the REST API of the web UI of the affected software. The …

9. 7.5CVE-2017-14766EPSS 1.8%2017-09-27

   The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_del_st_submit() function in functions.php only require knowing the student id num…

10. 8.8CVE-2017-5192EPSS 1.7%2017-09-26

    When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all authentication to be bypassed.

11. 7.2CVE-2017-14602EPSS 2.4%2017-09-26

    A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before bui…

12. 9.8CVE-2017-14706ExploitEPSS 28%2017-09-22

    DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll…

13. 9.8CVE-2017-14080EPSS 3.0%2017-09-22

    Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a specific part of the console using a blank password.

14. 9.8CVE-2015-1187KEVExploitEPSS 83%2017-09-21

    The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

15. 8.1CVE-2017-14623EPSS 1.7%2017-09-20

    In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using this package if these conditions are met: (1) it relies only on the return error of…

16. 8.8CVE-2017-10784EPSS 16%2017-09-19

    The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands vi…

17. 9.8CVE-2014-9618ExploitEPSS 73%2017-09-19

    The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication and subsequently create arbitrary profiles via a showdeny action to the default URL.

18. 9.8CVE-2014-9611ExploitEPSS 13%2017-09-19

    Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via a request to webadmin/nslam/index.php.

19. 7.5CVE-2017-9803EPSS 2.2%2017-09-18

    Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAware…

20. 9.8CVE-2017-14243ExploitEPSS 15%2017-09-17

    An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source, as demonstrated by info.…

21. 4.3CVE-2017-1002024EPSS 1.3%2017-09-14

    Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication before allow users to upload files.

22. 3.7CVE-2017-1520EPSS 1.3%2017-09-12

    IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT. IBM X-Force ID: 129830.

23. 8.1CVE-2017-14337EPSS 0.9%2017-09-12

    When MISP before 2.4.80 is configured with X.509 certificate authentication (CertAuth) in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an …

24. 7.5CVE-2014-9624EPSS 3.0%2017-09-12

    CAPTCHA bypass vulnerability in MantisBT before 1.2.19.

25. 6.5CVE-2017-7650EPSS 2.5%2017-09-11

    In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows locally or remotely connected clients to access MQTT topics that they do have the rights to. The same is…

26. 9.8CVE-2017-7649EPSS 1.6%2017-09-11

    The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules to be configured. Still the Equinox console port 5002 is left open, allowing to log into Kura witho…

27. 6.5CVE-2017-12225EPSS 2.0%2017-09-07

    A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session Fixation Vulnerability. The vulnerability is d…

28. 4.3CVE-2017-12213EPSS 0.8%2017-09-07

    A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 4000 Series Switches could allow an unauthenticated, adjacent attacker to cause dynamic ACL assignment to fail and the port…

29. 9.8CVE-2017-14147ExploitEPSS 66%2017-09-07

    An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi…

30. 9.8CVE-2015-3442EPSS 3.0%2017-09-07

    Soreco Xpert.Line 3.0 allows local users to spoof users and consequently gain privileges by intercepting a Windows API call.

31. 5.9CVE-2017-14117ExploitEPSS 8.0%2017-09-03

    The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP…

32. 9.8CVE-2015-7746EPSS 1.6%2017-09-01

    NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive information from or (2) modify volumes via vectors related to UTF-8 in the volume language.

33. 8.1CVE-2017-14032EPSS 1.5%2017-08-30

    ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly k…

34. 9.8CVE-2017-12698EPSS 4.8%2017-08-30

    An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. Specially crafted requests allow a possible authentication bypass that could allow remote code execution.

35. 8.8CVE-2015-8332EPSS 1.0%2017-08-28

    Huawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate online user identities and privileges," which allows remote authenticated users to gain privileges and perform a case operation as another user …

36. 9.8CVE-2015-1401EPSS 2.9%2017-08-28

    Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3.

37. 5.9CVE-2017-7934EPSS 2.1%2017-08-25

    An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a ser…

38. 7.4CVE-2017-7930EPSS 2.0%2017-08-25

    An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the potential to expose change records in the clear and allow a malicious party to sp…

39. 8.1CVE-2015-3206EPSS 2.4%2017-08-25

    The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in…

40. 5.3CVE-2014-7860EPSS 9.6%2017-08-25

    The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate requests, which allows remote attackers to obtain arbitrary photos and publish them to an arbitrary Facebo…

41. 9.8CVE-2014-7858EPSS 15%2017-08-25

    The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the username cookie parameter to an arbitrary string.

42. 9.8CVE-2014-7857EPSS 15%2017-08-25

    D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05b03, and DNS-322L 2.00b07 allow remote attackers to bypass authentication and log in with administr…

43. 7.8CVE-2015-8308EPSS 0.4%2017-08-24

    LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connections.

44. 9.8CVE-2016-4460EPSS 6.1%2017-08-22

    Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.

45. 5.3CVE-2016-2102EPSS 2.3%2017-08-22

    HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.

46. 8.8CVE-2017-7557EPSS 0.8%2017-08-22

    dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

47. 9.8CVE-2017-7420EPSS 2.4%2017-08-21

    An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9…

48. 9.8CVE-2015-4464EPSS 4.7%2017-08-18

    Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application server.

49. 5.3CVE-2017-6781EPSS 0.3%2017-08-17

    A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticated, local attacker to gain elevated privileges on an affected system. The affected privilege level …

50. 9.8CVE-2017-7546EPSS 62%2017-08-16

    PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.