VYPR

CWE-287

Improper Authentication

ClassDraftLikelihood: High

Description

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Hierarchy (View 1000)

Parents

Related attack patterns (CAPEC)

CAPEC-114 · CAPEC-115 · CAPEC-151 · CAPEC-194 · CAPEC-22 · CAPEC-57 · CAPEC-593 · CAPEC-633 · CAPEC-650 · CAPEC-94

CVEs mapped to this weakness (2,419)

page 110 of 121
  • CVE-2009-3261Sep 18, 2009
    Livestreet
    Livestreet
    risk 0.00cvss —epss 0.01

    update/update_0.1.2_to_0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors.

  • CVE-2009-3232Sep 17, 2009
    Ubuntu
    pam-auth-update
    risk 0.00cvss —epss 0.05

    pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass…

  • CVE-2009-3107Sep 8, 2009
    Symantec
    Deployment Solution
    risk 0.00cvss —epss 0.01

    Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.

  • CVE-2009-2697Sep 4, 2009
    GNOME Foundation
    Gdm
    risk 0.00cvss —epss 0.02

    The Red Hat build script for the GNOME Display Manager (GDM) before 2.16.0-56 on Red Hat Enterprise Linux (RHEL) 5 omits TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions via XDMCP connections, a different vulnerability than…

  • CVE-2008-7081Aug 25, 2009
    Raidsonic
    Icy Box Nas
    risk 0.00cvss —epss 0.02

    userHandler.cgi in RaidSonic ICY BOX NAS firmware 2.3.2.IB.2.RS.1 allows remote attackers to bypass authentication and gain administrator privileges by setting the login parameter to admin. NOTE: the provenance of this information is unknown; the details are obtained solely from…

  • CVE-2003-1574Aug 24, 2009
    Tiki
    Tiki
    risk 0.00cvss —epss 0.02

    TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related to the Internet Explorer "Remember Me" feature. NOTE: some of these details are obtained from third party information.

  • CVE-2008-6984Aug 19, 2009
    Parallels
    Plesk
    risk 0.00cvss —epss 0.01

    Plesk 8.6.0, when short mail login names (SHORTNAMES) are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with (1) a base64-encoded username that begins with a valid shortname, or (2) a username that matches a valid password, as…

  • CVE-2009-1878Aug 18, 2009
    Adobe Inc.
    Coldfusion
    risk 0.00cvss —epss 0.02

    Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.

  • CVE-2009-2088Aug 13, 2009
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when SPNEGO Single Sign-on (SSO) and disableSecurityPreInvokeOnFilters are configured, allows remote attackers to bypass authentication via a request…

  • CVE-2009-2085Aug 13, 2009
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving…

  • CVE-2009-0906Aug 13, 2009
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    The Service Component Architecture (SCA) feature pack for IBM WebSphere Application Server (WAS) SCA 1.0 before 1.0.0.3 allows remote authenticated users to bypass intended authentication.transport access restrictions and obtain unspecified access via unknown vectors.

  • CVE-2008-6951Aug 12, 2009
    Cms.maury91
    Maurycms
    risk 0.00cvss —epss 0.02

    MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request.

  • CVE-2009-0669Aug 7, 2009
    Zope
    Zodb
    risk 0.00cvss —epss 0.03

    Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.

  • CVE-2009-2410Jul 30, 2009
    SSSD
    Sssd
    risk 0.00cvss —epss 0.02

    The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with…

  • CVE-2009-2481Jul 16, 2009
    Movabletype
    Movabletype
    risk 0.00cvss —epss 0.01

    mt-wizard.cgi in Six Apart Movable Type before 4.261, when global templates are not initialized, allows remote attackers to bypass access restrictions and (1) send e-mail to arbitrary addresses or (2) obtain sensitive information via unspecified vectors.

  • CVE-2009-1390Jun 16, 2009
    Mutt
    Mutt
    risk 0.00cvss —epss 0.02

    Mutt 1.5.19, when linked against (1) OpenSSL (mutt_ssl.c) or (2) GnuTLS (mutt_ssl_gnutls.c), allows connections when only one TLS certificate in the chain is accepted instead of verifying the entire chain, which allows remote attackers to spoof trusted servers via a…

  • CVE-2009-2072Jun 15, 2009
    Apple Inc.
    Safari
    risk 0.00cvss —epss 0.00

    Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent…

  • CVE-2009-2071Jun 15, 2009
    Google
    Chrome
    risk 0.00cvss —epss 0.01

    Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site…

  • CVE-2009-2070Jun 15, 2009
    Opera
    Opera
    risk 0.00cvss —epss 0.01

    Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then…

  • CVE-2009-2069Jun 15, 2009
    Microsoft
    Internet Explorer
    risk 0.00cvss —epss 0.02

    Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site…