CVE-2024-8260

HIGH Year: 2024
CVSS v3 Score
7.3
High
Weakness Type
CWE-294
View all →

Vulnerability Description

A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s functions.

Related Vulnerabilities

CVE-2024-29851

HIGH
CVSS:7.2(High)

Veeam Backup Enterprise Manager allows high-privileged users to steal NTLM hash of Enterprise manager service account.

CWE-2942024

CVE-2018-1128

HIGH
CVSS:7.5(High)

It was found that cephx authentication protocol did not verify ceph clients correctly and was vulnerable to replay attack. Any attacker having access to ceph cluster network who is able to sniff packe...

CWE-2942018

CVE-2018-17176

HIGH
CVSS:7.5(High)

A replay issue was discovered on Neato Botvac Connected 2.2.0 devices. Manual control mode requires authentication, but once recorded, the authentication (always transmitted in cleartext) can be repla...

CWE-2942018

CVE-2018-7356

HIGH
CVSS:7.5(High)

All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vulnerability, which can generate easily predictable ISN, and allows remote attacke...

CWE-2942018

CVE-2019-12393

HIGH
CVSS:7.5(High)

Anviz access control devices are vulnerable to replay attacks which could allow attackers to intercept and replay open door requests.

CWE-2942019

CVE-2019-3915

HIGH
CVSS:7.5(High)

Authentication Bypass by Capture-replay vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an unauthenticated attacker with adjacent network access to intercept ...

CWE-2942019