CWE-358 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-358/ Sun, 26 Feb 2023 06:48:48 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-358 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-358/ 32 32 CVE-2018-20934 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-20934/ Sun, 26 Feb 2023 06:48:48 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-20934/ cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).

The post CVE-2018-20934 appeared first on CVE Vulnerability.

]]> cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts (SEC-411).

The post CVE-2018-20934 appeared first on CVE Vulnerability.

]]> CVE-2018-16857 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16857/ Sun, 26 Feb 2023 06:47:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16857/ Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from […]

The post CVE-2018-16857 appeared first on CVE Vulnerability.

]]> Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 minutes may not watch for bad passwords at all. The primary risk from this issue is with regards to domains that have been upgraded from Samba 4.8 and earlier. In these cases the manual testing done to confirm an organisation’s password policies apply as expected may not have been re-done after the upgrade.

The post CVE-2018-16857 appeared first on CVE Vulnerability.

]]> CVE-2018-16860 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16860/ Sun, 26 Feb 2023 06:47:13 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16860/ A flaw was found in samba’s Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) […]

The post CVE-2018-16860 appeared first on CVE Vulnerability.

]]> A flaw was found in samba’s Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.

The post CVE-2018-16860 appeared first on CVE Vulnerability.

]]> CVE-2018-1243 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1243/ Sun, 26 Feb 2023 06:45:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1243/ Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks.

The post CVE-2018-1243 appeared first on CVE Vulnerability.

]]> Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks.

The post CVE-2018-1243 appeared first on CVE Vulnerability.

]]> CVE-2018-0268 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-0268/ Sun, 26 Feb 2023 06:44:07 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-0268/ A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes […]

The post CVE-2018-0268 appeared first on CVE Vulnerability.

]]> A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes service port could execute commands with elevated privileges within provisioned containers. A successful exploit could result in a complete compromise of affected containers. This vulnerability affects Cisco DNA Center Software Releases 1.1.3 and prior. Cisco Bug IDs: CSCvi47253.

The post CVE-2018-0268 appeared first on CVE Vulnerability.

]]> CVE-2020-25686 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-25686/ Sun, 26 Feb 2023 06:39:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-25686/ A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 queries for the […]

The post CVE-2020-25686 appeared first on CVE Vulnerability.

]]> A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 queries for the same name. This flaw allows an off-path attacker on the network to substantially reduce the number of attempts that it would have to perform to forge a reply and have it accepted by dnsmasq. This issue is mentioned in the “Birthday Attacks” section of RFC5452. If chained with CVE-2020-25684, the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity.

The post CVE-2020-25686 appeared first on CVE Vulnerability.

]]> CVE-2020-10743 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-10743/ Sun, 26 Feb 2023 06:35:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-10743/ It was discovered that OpenShift Container Platform’s (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP’s distribution of Kibana, such as clickjacking.

The post CVE-2020-10743 appeared first on CVE Vulnerability.

]]> It was discovered that OpenShift Container Platform’s (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker to trick a user into performing arbitrary actions in OCP’s distribution of Kibana, such as clickjacking.

The post CVE-2020-10743 appeared first on CVE Vulnerability.

]]> CVE-2019-14823 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-14823/ Sun, 26 Feb 2023 06:30:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-14823/ A flaw was found in the “Leaf and Chain” OCSP policy implementation in JSS’ CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.

The post CVE-2019-14823 appeared first on CVE Vulnerability.

]]> A flaw was found in the “Leaf and Chain” OCSP policy implementation in JSS’ CryptoManager versions after 4.4.6, 4.5.3, 4.6.0, where it implicitly trusted the root certificate of a certificate chain. Applications using this policy may not properly verify the chain and could be vulnerable to attacks such as Man in the Middle.

The post CVE-2019-14823 appeared first on CVE Vulnerability.

]]> CVE-2021-21387 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-21387/ Thu, 23 Feb 2023 14:07:00 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-21387/ Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.0 and before 2.3.0 there was a set of vulnerabilities causing inadequate encryption strength. Part of the secret identity key was disclosed by the fingerprint used for connection. Additionally, the safety number was improperly calculated. It was computed using part of […]

The post CVE-2021-21387 appeared first on CVE Vulnerability.

]]> Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.0 and before 2.3.0 there was a set of vulnerabilities causing inadequate encryption strength. Part of the secret identity key was disclosed by the fingerprint used for connection. Additionally, the safety number was improperly calculated. It was computed using part of one of the public identity keys instead of being derived from both public identity keys. This caused issues in computing safety numbers which would potentially be exploitable in the real world. Additionally there was inadequate encryption strength due to use of 1024-bit DSA keys. These issues are all fixed in version 2.3.0.

The post CVE-2021-21387 appeared first on CVE Vulnerability.

]]> CVE-2022-22156 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-22156/ Thu, 23 Feb 2023 05:02:44 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-22156/ An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The following command can be executed by an administrator via the […]

The post CVE-2022-22156 appeared first on CVE Vulnerability.

]]> An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The following command can be executed by an administrator via the CLI to refresh a script from a remote location, which is affected from this vulnerability: >request system scripts refresh-from (commit | event | extension-service | op | snmp) file filename url This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2; 21.1 versions prior to 21.1R1-S1, 21.1R2.

The post CVE-2022-22156 appeared first on CVE Vulnerability.

]]>