TYPE DE FAIBLESSE

CWE-592

6 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-592 (en anglais) →

CVE-2023-30971Gotham Gaia application was found to be exposing multiple unauthenticated endpoints. 6.8 MOYENNE

CVE-2024-42759An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint. 6.3 MOYENNE

CVE-2019-10198An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously, commit tasks were searched through find_resource, which performed authorization ch… 6.5 MOYENNE

CVE-2018-10847prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtual host associated with a user session remained the same acro… 4.2 MOYENNE

CVE-2017-12164A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an attacker could simply s… 4.1 MOYENNE

CVE-2017-7537It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4. An attacker could potentially … 5.9 MOYENNE