Tenable

APRIL 8, 2021

CVE-2020-12812. Improper Authentication (FortiOS). This blog post was published on April 8 and reflects VPR at that time. This vulnerability is a pre-authentication flaw, which means an attacker does not need to be authenticated to the vulnerable device in order to exploit it. CVE-2019-5591.

Authentication 108

Authentication Systems Review Research Groups 108

Tenable

DECEMBER 8, 2020

The final Patch Tuesday of 2020 includes fixes for 58 CVEs, including workaround details for a severe vulnerability in Windows DNS Resolver called SAD DNS. Microsoft patched 58 CVEs in the December 2020 Patch Tuesday release, including 9 CVEs rated as critical. CVE-2020-25705 | Windows DNS Resolver Spoofing Vulnerability.

Software Review 106

Software Review Windows Systems Review Azure 106

Datavail

FEBRUARY 26, 2020

You can use IAM DB authentication to authenticate your RDS instance or Aurora cluster without a password. It uses an AWS-generated token for authentication. What if there is a feature that generates a random password, authenticates to the database and this password is only valid for a few minutes? Create IAM policy.

Authentication 98

Authentication AWS Policies Resources 98

Tenable

OCTOBER 12, 2020

CVE-2020-1631. CVE-2020-2021. CVE-2020-5902. CVE-2020-15505. CVE-2020-1472. This blog post was published on October 12 and reflects VPR at that time. Microsoft is actively tracking threat actor activity using exploits for the CVE-2020-1472 Netlogon EoP vulnerability, dubbed Zerologon. MobileIron.

WAN 114

WAN Authentication Government Network 114

Tenable

MAY 3, 2020

CVE-2020-11651 is an authentication bypass in two methods of the ClearFuncs class. The second method, _prep_auth_info() allows for the remote execution of commands on the master server as an attacker can obtain the “root key,” which is used to authenticate commands on the master server from a local machine. are vulnerable.

Technical Advisors 104

Technical Advisors Open Source Software Review Systems Review 104

Tenable

OCTOBER 15, 2020

Researchers disclose a critical pre-authentication vulnerability in the SonicWall VPN Portal that is easily exploitable. On October 12, SonicWall published a security advisory (SNWLID-2020-0010) to address a critical vulnerability in SonicOS that could lead to remote code execution (RCE). CVE-2020-5133. SNWLID-2020-0008.

Authentication 118

Authentication Research Firewall Network 118

Tenable

FEBRUARY 25, 2020

CVE-2020-0688 is a static key vulnerability in Microsoft Exchange Control Panel (ECP), a component of Microsoft Exchange Server. The use of static keys could allow an authenticated attacker with any privilege level to send a specially crafted request to a vulnerable ECP and gain SYSTEM level arbitrary code execution.

Authentication 115

Authentication Research Open Source Tools 115

Tenable

MARCH 17, 2020

CVE-2020-8467 is a vulnerability in Apex One and OfficeScan in a component of a migration tool. A remote, authenticated attacker could exploit this vulnerability and gain arbitrary code execution on affected Apex One and OfficeScan installations. March 16, 2020: Trend Micro Security Bulletin for Apex One and OfficeScan.

Trends 104

Trends Software Review Systems Review Authentication 104

Tenable

NOVEMBER 9, 2022

CVE-2022-27510: Critical Citrix ADC and Gateway Authentication Bypass Vulnerability Citrix publishes an advisory to address multiple flaws in its ADC and Gateway products, including a critical vulnerability. Citrix ADC and Gateway Authentication Bypass Vulnerability. Background. CVE-2022-27510. CVE-2022-27513. CVE-2022-27516.

Authentication 52

Authentication Virtualization Healthcare Network 52

Tenable

NOVEMBER 10, 2020

Microsoft patched 112 CVEs in the November 2020 Patch Tuesday release, including 17 CVEs rated as critical. CVE-2020-17087 | Windows Kernel Local Elevation of Privilege Vulnerability. CVE-2020-17087 was used to escape Google Chrome’s sandbox in order to elevate privileges on the exploited system.

Windows 105

Windows Software Review Azure Systems Review 105

Tenable

APRIL 14, 2020

Microsoft's April 2020 Patch Tuesday includes 113 CVEs, including a patch for two zero-day flaws (CVE-2020-0938 and CVE-2020-1020) in Adobe Type Manager Library disclosed on March 23. CVE-2020-1020 and CVE-2020-0938 | Adobe Type Manager Library Remote Code Execution Vulnerabilities.

Software Review 104

Software Review Systems Review Windows Operating System 104

Tenable

SEPTEMBER 14, 2020

Security researchers reveal how the cryptographic authentication scheme in Netlogon can be exploited to take control of a Windows domain controller (DC). On September 11, researchers at Secura published a blog post for a critical vulnerability they’ve dubbed “Zerologon.” Image source: Secura CVE-2020-1472 Whitepaper. Background.

Windows 114

Windows LAN Backup Authentication 114

Tenable

SEPTEMBER 10, 2020

PAN-OS devices that have enabled the captive portal or multi-factor authentication features are vulnerable to a critical buffer overflow flaw. CVE-2020-2040 is a critical buffer overflow vulnerability in PAN-OS when either the Captive Portal or Multi-Factor Authentication (MFA) feature has been enabled. CVE-2020-2036.

Software Review 109

Software Review Systems Review Authentication Firewall 109

Tenable

FEBRUARY 9, 2024

On February 7, researchers at Fortinet published a blog post highlighting the exploitation of CVE-2022-42475 and CVE-2023-27997 by Chinese threat groups including Volt Typhoon , APT15 (also known as Ke3chang) and APT31 (also known as ZIRCONIUM) as well as UNC757 ( also known as Fox Kitten), which has a “suspected nexus to the Iranian government.”

Malware 121

Malware Authentication Infrastructure Analysis 121

Tenable

OCTOBER 29, 2020

Johannes Ullrich, Dean of Research at SANS Internet Storm Center (ISC), published a post disclosing active exploitation of a critical vulnerability in Oracle WebLogic Server just over a week after a patch was released in Oracle’s October 2020 Critical Patch Update (CPU). In March, Jang confirmed that CVE-2020-2555 was not completely fixed.

Research 103

Research Analysis Authentication Report 103

Tenable

APRIL 20, 2021

In addition to the advisory, Pulse Secure also published a blog post detailing observed exploit behavior related to the zero-day as well others linked to previously disclosed vulnerabilities in its Pulse Connect Secure solution. Pulse Connect Secure Authentication Bypass Vulnerability. CVE-2020-8243. Authenticated.

Authentication 133

Authentication Malware Research Government 133

Tenable

NOVEMBER 5, 2020

On November 2, researchers at FireEye published a blog post detailing findings from a Mandiant incident response investigation that led to the discovery of an uncharacterized (UNC) group they refer to as UNC1945. On November 4, FireEye published a follow-up blog post providing additional details about the vulnerability. Background.

Authentication 73

Authentication Research Software Review Systems Review 73

Tenable

APRIL 27, 2021

Here’s a look at how to safeguard your Active Directory from the known roasting attack on Kerberos Pre-Authentication. As part of the Kerberos authentication process in Active Directory, there is an initial request to authenticate without a password. User account configured to not require Kerberos Pre-Authentication.

Authentication 52

Authentication How To Course Strategy 52

Tenable

OCTOBER 13, 2020

Microsoft patched 87 CVEs in the October 2020 Patch Tuesday release, including 11 CVEs rated critical. CVE-2020-16898 | Windows TCP/IP Remote Code Execution Vulnerability. CVE-2020-16898 , dubbed “Bad Neighbor,” is a critical remote code execution (RCE) vulnerability within the Windows TCP/IP stack.

Windows 104

Windows Software Review Systems Review Advertising 104

Tenable

APRIL 12, 2024

While no specific details about these attacks were available at the time this blog was published, researchers at Volexity are credited with discovering the flaw. CVE-2020-2021 , a critical authentication bypass vulnerability in PAN-OS, which also received a CVSSv3 score of 10.0,

Network 118

Network Firewall Software Review Systems Review 118

Tenable

JULY 14, 2020

CVE-2020-6287 is caused by a complete lack of authentication in the SAP NetWeaver AS Java’s LM Configuration Wizard. CVE-2020-6286 is a path traversal vulnerability due to the lack of input validation for a path in a “certain parameter” of the web service. SAP Security Patch Day for July 2020. Proof of concept.

Applications 99

Applications Software Review Systems Review Authentication 99

Tenable

OCTOBER 21, 2020

On October 20, Oracle released the Critical Patch Update (CPU) Advisory for October 2020 , its final quarterly release of security patches for the year. This quarter’s update marks the second-highest count in Oracle CPUs, surpassed only by the July 2020 update which holds the record with over 440 patches. Notable Vulnerabilities.

Systems Review 102

Systems Review Applications Construction Insurance 102

Kaseya

OCTOBER 14, 2020

Moderate A vulnerability that is mitigated to a significant degree by certain factors such as default configuration, auditing and authentication requirements. Patch Tuesday October 2020 Updates. See this month’s release notes at the bottom of this blog.). Microsoft recommends that customers consider applying the security update.

Windows 52

Windows Authentication Operating System Media 52

Kaseya

OCTOBER 14, 2020

Moderate A vulnerability that is mitigated to a significant degree by certain factors such as default configuration, auditing and authentication requirements. Patch Tuesday October 2020 Updates. See this month’s release notes at the bottom of this blog.). Microsoft recommends that customers consider applying the security update.

Windows 52

Windows Authentication Operating System Media 52

Tenable

JANUARY 10, 2024

CVE Description CVSSv3 CVE-2023-46805 Ivanti Connect Secure and Ivanti Policy Secure Authentication Bypass Vulnerability 8.2 Analysis CVE-2023-46805 is an authentication bypass vulnerability in the web component of Ivanti Connect Secure (ICS), previously known as Pulse Connect Secure and Ivanti Policy Secure.

Policies 71

Policies Authentication Analysis Network 71

Tenable

MARCH 6, 2020

CVE-2020-8597 is a buffer overflow vulnerability in pppd due to a logic flaw in the packet processor of the Extensible Authentication Protocol (EAP). At the time this blog post was published, there was no working proof-of-concept (PoC) for this vulnerability. RHSA-2020:0631. RHSA-2020:0630. RHSA-2020:0634.

Software Review 102

Software Review Systems Review Linux Authentication 102

Tenable

OCTOBER 2, 2023

This blog post was published on October 2 and reflects VPR at that time. An unauthenticated (or pre-authenticated) attacker could exploit this vulnerability by sending a specially crafted POST request to a vulnerable WS_FTP Server. Critical CVE-2023-42657 WS_FTP Directory Traversal Vulnerability 9.9 WS_FTP Server 2022 2022.0.2

Software Review 121

Software Review Software Systems Review Authentication 121

Tenable

MAY 9, 2024

In order to exploit this vulnerability, the vulnerable target system needs to be configured with Lightweight Directory Access Protocol (LDAP) for user authentication. Successful exploitation would result in the disclosure of sensitive information, including password hashes and the administrator password hash.

Research 59

Research Authentication Report Analysis 59

Tenable

JULY 6, 2020

CVE-2020-5902 is a critical vulnerability in the BIG-IP Traffic Management User Interface (TMUI) also known as the Configuration Utility. CVE-2020-5903 is a cross-site scripting vulnerability in TMUI/Configuration Utility. Ben Goerz (@bengoerz) July 4, 2020. MegaZone (@megazone) July 4, 2020. the highest possible score.

Software Review 98

Software Review Technical Review Systems Review Research 98

Tenable

DECEMBER 8, 2020

The vulnerability was disclosed by the NSA to VMware, which published details in a security advisory, VMSA-2020-0027.2 , on November 23. CVE-2020-4066 is a command injection vulnerability in the administrative configurator component in certain versions of VMware products. Exploiting CVE-2020-4006 to access protected data.

Linux 63

Linux Software Review Systems Review Windows 63

Tenable

JULY 25, 2023

It was formerly known as MobileIron Core prior to its acquisition by Ivanti in 2020. CVE Description CVSSv3 Severity CVE-2023-35078 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability 10.0 CVE Description CVSSv3 Severity CVE-2023-35078 Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability 10.0

Mobile 98

Mobile Knowledge Base Authentication Government 98

Tenable

OCTOBER 18, 2023

On October 17, Mandiant released a blog post and remediation guidance document where they noted that exploitation of a zero-day vulnerability, later identified as CVE-2023-4966, was observed in late August. Successful exploitation allows the attacker to bypass multifactor authentication (MFA) requirements. and later releases of 13.0

Systems Review 67

Systems Review Software Review Authentication Virtualization 67

Tenable

APRIL 7, 2022

OAuth2 ACS Authentication Bypass Vulnerability. OAuth2 ACS Authentication Bypass Vulnerability. CVE-2022-22955 and CVE-2022-22956 are a pair of authentication bypass vulnerabilities in the OAuth 2.0 endpoints in VMware Workspace ONE in order to successfully authenticate to the Workspace ONE instance. Description.

Authentication 98

Authentication Research Analysis Cloud 98

Tenable

APRIL 27, 2020

CVE-2020-12271 is a pre-authentication SQL injection vulnerability that exists in the Sophos XG Firewall/Sophos Firewall Operating System (SFOS). There was no proof-of-concept (PoC) available for this vulnerability at the time this blog post was published. Further information about this vulnerability has not been made public.

Firewall 101

Firewall WAN Operating System Systems Review 101

TechCrunch

MAY 12, 2022

The company attended pitch competition after pitch competition, raising about a total of $100,000, until one day in the summer of 2020 an analyst for musician Jay-Z’s Marcy Ventures happened to be in the audience. By 2021, the app had gone viral after Jay-Z’s Marcy Ventures wrote a blog post about it. “We Image Credits: Altro.

Education 253

Education Marketing Authentication Video 253

Tenable

JUNE 12, 2023

On June 11, Fol tweeted about the availability of patches for the flaw, adding that it is “reachable pre-authentication, on every SSL VPN appliance.” This is reachable pre-authentication, on every SSL VPN appliance. In the blog, Fortinet notes that CVE-2023-27997 “may have been exploited in a limited number of cases.”

Firewall 102

Firewall Authentication Research Groups 102

Tenable

MAY 7, 2020

CVE-2020-3187. CVE-2020-3195. CVE-2020-3179. CVE-2020-3191. CVE-2020-3196. CVE-2020-3254. CVE-2020-3283. CVE-2020-3298. CVE-2020-3189. CVE-2020-3125. Authentication Bypass. CVE-2020-3255. CVE-2020-3259. Source: Cisco CVE-2020-3187 Advisory. Memory Leak.

Authentication 62

Authentication System Operating System Software 62