CWE-592.

Apache Tomcat - Digest authenticator will authenticate any unknown user

• Authentication bypass
• CWE-592

<9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22 · fixed in 9.0.118, 10.1.55, 11.0.22

Gaia unauthenticated endpoints

• com.palantir.acme.gaia:gaia
• CWE-592

An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.

• CWE-592

An issue in Horizon Business Services Inc.

• CWE-592

Keycloak Authentication Error

• Authentication bypass
• Weak cryptography or TLS

>=7.0.0, <=7.0.1 · no fixed version yet

Keycloak Authentication Error

• Authentication bypass
• CWE-305

>=7.0.0, <=7.0.1 · no fixed version yet

Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass

• CWE-592

=0.1.0 · no fixed version yet

Privilege Escalation in Hibernate Validator

• Code injection
• CWE-592

>=5.2.0, <5.2.5.Final || >=5.3.0, <5.3.6.Final || >=5.4.0, <5.4.2.Final · fixed in 5.2.5.Final, 5.3.6.Final, 5.4.2.Final

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester.

• Red Hat wildfly-security-manager
• CWE-592

Improper Verification of Cryptographic Signature in keycloak

• Weak cryptography or TLS
• CWE-592

<7.0.0 · fixed in 7.0.0

An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7.

• The Foreman Project foreman-tasks
• CWE-592

heketi: It was found that default configuration of Heketi does not require any authentication…

• heketi
• CWE-592

Baxter SIGMA Spectrum Infusion System: Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery…

• Baxter SIGMA Spectrum Infusion System
• CWE-592

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.

• [UNKNOWN] libssh
• CWE-592

smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature

• Authentication bypass
• CWE-592

<0.1.11 || >=0.2.0, <0.2.1 · fixed in 0.1.11, 0.2.1

curl: A flaw was found in curl before version 7.51.0 When re-using a connection…

• curl
• CWE-592

prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass.

• [UNKNOWN] prosody
• CWE-592

GNOME gdm: A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once…

• GNOME gdm
• CWE-592

Dogtag PKI pki-core: It was found that a mock CMC authentication plugin with a hardcoded secret was…

• Dogtag PKI pki-core
• CWE-592

[UNKNOWN] openshift-ansible: openshift-ansible before versions 3.9.23…

• [UNKNOWN] openshift-ansible
• CWE-592

Phoenix Contact ILC PLCs: The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if…

• Phoenix Contact ILC PLCs
• CWE-592

Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a valid user name, and physical or network access to the affected system, to bypass the application-level au…

• SIMATIC Logon All versions < V1.5 SP3 Update 2
• CWE-592

Advantech WebAccess Authentication Bypass Issues

• Advantech WebAccess
• CWE-592

I-GEN opLYNX Central Authentication Bypass

• i-GEN Solutions Corporation opLYNX
• CWE-592