CWE-602 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-602/ Sun, 26 Feb 2023 09:05:23 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-602 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-602/ 32 32 CVE-2007-0163 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0163/ Sun, 26 Feb 2023 09:05:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0163/ SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.

The post CVE-2007-0163 appeared first on CVE Vulnerability.

]]> SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing the last 20 bytes of the JPEG image with alternate password information.

The post CVE-2007-0163 appeared first on CVE Vulnerability.

]]> CVE-2007-0164 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0164/ Sun, 26 Feb 2023 09:05:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0164/ Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information.

The post CVE-2007-0164 appeared first on CVE Vulnerability.

]]> Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and decrypt embedded steganography by replacing certain bytes of the JPEG image with alternate password information.

The post CVE-2007-0164 appeared first on CVE Vulnerability.

]]> CVE-2007-0100 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0100/ Sun, 26 Feb 2023 09:05:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0100/ The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server.

The post CVE-2007-0100 appeared first on CVE Vulnerability.

]]> The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server.

The post CVE-2007-0100 appeared first on CVE Vulnerability.

]]> CVE-2022-1525 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-1525/ Thu, 23 Feb 2023 05:02:07 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-1525/ The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.

The post CVE-2022-1525 appeared first on CVE Vulnerability.

]]> The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.

The post CVE-2022-1525 appeared first on CVE Vulnerability.

]]>