CWE-420.

Windows Schannel Spoofing Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• Authentication bypass
• CWE-420

Kiteworks Core Unprotected Alternate Channel

• Kiteworks Core
• CWE-420

An issue was discovered in Cyrus IMAP before 3.12.4.

• cyrusimap Cyrus IMAP
• CWE-420

Tor: Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could…

• Tor
• CWE-420

ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

• CWE-420

<3.38 · fixed in 3.38

BIG-IP httpd access control vulnerability

• F5 BIG-IP
• CWE-420

LiteLLM has a sandbox escape in custom-code guardrail

• Code injection
• CWE-420

>=1.81.8, <1.83.10 · fixed in 1.83.10

Prosody: An issue was discovered in Prosody before 0.12.6 and 1.0.0 through 13.0.0 before 13.0.5…

• Prosody
• CWE-420

Duplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrail

• CWE-420

>=1.81.8, <1.83.10 · fixed in 1.83.10

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

• OpenBSD OpenSSH
• CWE-420

Roundcube Webmail: Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13…

• Roundcube Webmail
• CWE-420

Beckhoff: Performing privileged operations and gaining administrator access

• Beckhoff Automation Beckhoff.Device.Manager.XAR
• Beckhoff Automation MDP software package for TwinCAT/BSD
• CWE-420

Duplicate Advisory: ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

• CWE-420

<3.38 · fixed in 3.38

BullWall Ransomware Containment hard-coded folder exclusions

• BullWall Ransomware Containment
• CWE-420

In Oxide control plane 15 through 17 before 17.1, API tokens can be renewed past their expiration date.

• Oxide Omicron
• CWE-420

Unauthenticated log access in Twonky Server

• Lynxtechnology Twonky Server
• CWE-420

Dyson MQTT server: The Dyson MQTT server (2022 and possibly later) allows publications and subscriptions by…

• Dyson MQTT server
• CWE-420

Slack Nebula may accept arbitrary source IP addresses

• CWE-420

>=1.9.4, <1.9.7 · fixed in 1.9.7

figma-developer-mcp vulnerable to command injection in get_figma_data tool

• Command injection
• CWE-420

<0.6.3 · fixed in 0.6.3

Lenovo XClarity Orchestrator (LXCO): An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the…

• Lenovo XClarity Orchestrator (LXCO)
• CWE-420

Protection mechanism failure in Microsoft Windows

• Microsoft Windows
• CWE-420
• CWE-693

In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).

• ES iperf3
• CWE-420

CrushFTP: CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23…

• CrushFTP
• CWE-420

freedesktop xdg-utils: xdg-open in xdg-utils through 1.2.1 can send requests containing SameSite=Strict cookies…

• freedesktop xdg-utils
• CWE-420

InnoShop: In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager…

• InnoShop
• CWE-420

IBM Personal Communications command execution

• IBM Personal Communications
• CWE-420

Intel(R) Processors: Unprotected alternative channel of return branch target prediction in some Intel(R)…

• Intel(R) Processors
• CWE-420

A connection hijacking vulnerability exists in some Huawei home routers.

• Huawei PT9030-15
• Huawei WS7206-10
• CWE-420

Some Huawei home routers have a connection hijacking vulnerability.

• Huawei TC7001-10
• Huawei WS7200-10
• CWE-420

codechecker vulnerable to authentication bypass when using specifically crafted URLs

• Authentication bypass
• CWE-420

<6.24.2 · fixed in 6.24.2

Vulnerable juju introspection abstract UNIX domain socket

• CWE-420

<0.0.0-20240829052008-43f0fc59790d · fixed in 0.0.0-20240829052008-43f0fc59790d

Duplicate Advisory: Juju Unprotected Alternate Channel vulnerability

• CWE-420

<0.0.0-20241001032836-2af7bd8e310b · fixed in 0.0.0-20241001032836-2af7bd8e310b

Rockwell Automation Chassis Restrictions Bypass Vulnerability in Select Logix Devices

• Rockwell Automation ControlLogix® 5580 (1756-L8z)
• Rockwell Automation GuardLogix® 5580 (1756-L8zS)
• CWE-420

LearnPress – WordPress LMS Plugin <= 4.2.6.8.1 - Unauthenticated Bypass to User Registration

• thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
• CWE-420

LearnPress – WordPress LMS Plugin <= 4.2.6.5 - Unauthenticated Bypass to User Registration

• thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
• CWE-420

Cisco IOS XE Software: Cisco is providing an update for the ongoing investigation into observed exploitation of…

• Cisco IOS XE Software
• CWE-420

NI MeasurementLink Python Services Improper Access Restriction vulnerability

• CWE-420

<1.1.1 || >=1.2.0.dev0, <1.2.0 · fixed in 1.1.1, 1.2.0

Issues notification metadata lacks authorization

• com.palantir.issues:issues
• Authentication bypass
• CWE-420

Snap One OvrC Cloud: Snap One OvrC cloud servers contain a route an attacker can use to bypass requirements…

• Snap One OvrC Cloud
• CWE-420

GateManager debug interface is included in non-debug builds

• Secomea GateManager
• CWE-420

Docker Swarm encrypted overlay network may be unauthenticated

• CWE-420
• CWE-636

>=1.12.0, <20.10.24 || >=23.0.0, <23.0.3 · fixed in 20.10.24, 23.0.3

Docker Swarm encrypted overlay network with a single endpoint is unauthenticated

• CWE-420
• CWE-636

>=1.12.0, <20.10.24 || >=23.0.0, <23.0.3 · fixed in 20.10.24, 23.0.3

GateManager debug interface is included in production builds

• Secomea GateManager
• CWE-420

Improper Authentication in Kubernetes

• CWE-420

<1.16.11 || >=1.17.0, <1.17.7 || >=1.18.0, <1.18.4 · fixed in 1.16.11, 1.17.7, 1.18.4