CVE-2024-7487

MEDIUM Year: 2024
CVSS v3 Score
5.8
Medium
Weakness Type
CWE-287
View all →

Vulnerability Description

An improper authentication vulnerability exists in WSO2 Identity Server 7.0.0 due to an implementation flaw that allows app-native authentication to be bypassed when an invalid object is passed. Exploitation of this vulnerability could enable malicious actors to circumvent the client verification mechanism, compromising the integrity of the authentication process.

Related Vulnerabilities

CVE-2018-16464

MEDIUM
CVSS:5.7(Medium)

A missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to password protected link shares when the owner had changed the password.

CWE-2872018

CVE-2018-3815

MEDIUM
CVSS:5.7(Medium)

The "XML Interface to Messaging, Scheduling, and Signaling" (XIMSS) protocol implementation in CommuniGate Pro (CGP) 6.2 suffers from a Missing XIMSS Protocol Validation attack that leads to an email ...

CWE-2872018

CVE-2019-8804

MEDIUM
CVSS:5.7(Medium)

An inconsistency in Wi-Fi network configuration settings was addressed. This issue is fixed in iOS 13.2 and iPadOS 13.2. An attacker in physical proximity may be able to force a user onto a malicious ...

CWE-2872019

CVE-2020-35207

MEDIUM
CVSS:5.7(Medium)

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The PIN authentication for unlocking can be bypassed by forcing the authenticatio...

CWE-2872020

CVE-2020-35208

MEDIUM
CVSS:5.7(Medium)

An issue was discovered in the LogMein LastPass Password Manager (aka com.lastpass.ilastpass) app 4.8.11.2403 for iOS. The password authentication for unlocking can be bypassed by forcing the authenti...

CWE-2872020

CVE-2020-7296

MEDIUM
CVSS:5.7(Medium)

Privilege Escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.1 allows authenticated user interface user to access protected configuration files via improper access control in the user i...

CWE-2872020