CWE-306 · Missing Authentication for Critical Function (page 25)
Page 25 of 30 — CVEs classified under CWE-306, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10148 | Critical | 9.8 | 2020-12-29 | The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a… |
CVE-2020-9208 | Medium | 6.5 | 2020-12-29 | There is an information leak vulnerability in iManager NetEco 6000 versions V600R021C00. A module is lack of authentication. Attackers without access to the mo… |
CVE-2020-29551 | Critical | 9.1 | 2020-12-23 | An issue was discovered in URVE Build 24.03.2020. Using the _internal/pc/shutdown.php path, it is possible to shutdown the system. Among others, the following… |
CVE-2020-24580 | High | 7.5 | 2020-12-22 | An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Lack of authentication functionality allows an attacker to assi… |
CVE-2020-26173 | Low | 3.1 | 2020-12-18 | An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid docume… |
CVE-2020-35197 | Critical | 9.8 | 2020-12-17 | The official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank password for a root user. System using the memcached docker contain… |
CVE-2020-35196 | Critical | 9.8 | 2020-12-17 | The official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific) contain a blank password for a root user. System using the rabbitm… |
CVE-2020-35195 | Critical | 9.8 | 2020-12-17 | The official haproxy docker images before 1.8.18-alpine (Alpine specific) contain a blank password for a root user. System using the haproxy docker container d… |
CVE-2020-35192 | Critical | 9.8 | 2020-12-17 | The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions… |
CVE-2020-35191 | Critical | 9.8 | 2020-12-17 | The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user. System using the drupal docker container… |
CVE-2020-35190 | Critical | 9.8 | 2020-12-17 | The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user. System using the plone docker cont… |
CVE-2020-35186 | Critical | 9.8 | 2020-12-17 | The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affecte… |
CVE-2020-35184 | Critical | 9.8 | 2020-12-17 | The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deployed by affected vers… |
CVE-2020-35189 | Critical | 9.8 | 2020-12-17 | The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker container deployed… |
CVE-2020-35187 | Critical | 9.8 | 2020-12-17 | The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. System using the telegraf docker container… |
CVE-2020-35185 | Critical | 9.8 | 2020-12-17 | The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost docker container deplo… |
CVE-2020-28929 | Critical | 9.8 | 2020-12-16 | Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrat… |
CVE-2020-25621 | High | 8.4 | 2020-12-16 | An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a n… |
CVE-2020-35469 | Critical | 9.8 | 2020-12-16 | The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracott… |
CVE-2020-35468 | Critical | 9.8 | 2020-12-16 | The Appbase streams Docker image 2.1.2 contains a blank password for the root user. Systems deployed using affected versions of the streams container may allow… |
CVE-2020-35193 | Critical | 9.8 | 2020-12-16 | The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container depl… |
CVE-2020-35467 | Critical | 9.8 | 2020-12-15 | The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs contai… |
CVE-2020-35466 | Critical | 9.8 | 2020-12-15 | The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Blackfire container… |
CVE-2020-35464 | Critical | 9.8 | 2020-12-15 | Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Ag… |
CVE-2020-35463 | Critical | 9.8 | 2020-12-15 | Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed using affected versions of the Instana Dyna… |
CVE-2020-35462 | Critical | 9.8 | 2020-12-15 | Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the CoScale agent con… |
CVE-2020-25228 | Critical | 9.8 | 2020-12-14 | A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). A service available on port 10005/tcp of the affected devices… |
CVE-2020-16102 | High | 7.1 | 2020-12-14 | Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with invalid configuration… |
CVE-2020-7540 | Critical | 9.8 | 2020-12-11 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Web Server on Modicon M340, Legacy Offers Modicon Quantum and Modicon Premi… |
CVE-2020-29311 | Critical | 9.8 | 2020-12-10 | Ubilling v1.0.9 allows Remote Command Execution as Root user by executing a malicious command that is injected inside the config file and being triggered by an… |
CVE-2020-26829 | Critical | 10.0 | 2020-12-09 | SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missin… |
CVE-2020-27902 | Medium | 4.6 | 2020-12-08 | An authentication issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2. A person with physical access to an iOS… |
CVE-2020-28946 | High | 7.5 | 2020-12-08 | An improper webserver configuration on Plum IK-401 devices with firmware before 1.02 allows an attacker (with network access to the device) to obtain the confi… |
CVE-2020-28937 | High | 7.5 | 2020-12-03 | OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results… |
CVE-2020-29389 | Critical | 9.8 | 2020-12-02 | The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affect… |
CVE-2020-29379 | Medium | 5.5 | 2020-11-29 | An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. During the process of updating the firmware, the update script starts… |
CVE-2020-29138 | Medium | 5.3 | 2020-11-27 | Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET_4.109.0, allows remote unauthenticated users to dow… |
CVE-2020-29058 | Critical | 9.8 | 2020-11-24 | An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S… |
CVE-2020-27985 | High | 7.8 | 2020-11-23 | Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo passwo… |
CVE-2020-7561 | Critical | 9.8 | 2020-11-19 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in Easergy T300 (with firmware 2.7 and older) that could cause a wide range of pro… |
CVE-2020-3531 | Critical | 9.8 | 2020-11-18 | A vulnerability in the REST API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to access the back-end database of an… |
CVE-2020-3392 | High | 7.5 | 2020-11-18 | A vulnerability in the API of Cisco IoT Field Network Director (FND) could allow an unauthenticated, remote attacker to view sensitive information on an affect… |
CVE-2020-26824 | Critical | 10.0 | 2020-11-10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the U… |
CVE-2020-26823 | Critical | 10.0 | 2020-11-10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the U… |
CVE-2020-26822 | Critical | 10.0 | 2020-11-10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the O… |
CVE-2020-26821 | Critical | 10.0 | 2020-11-10 | SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the S… |
CVE-2020-13927 | Critical | 9.8 | 2020-11-10 | The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who mi… |
CVE-2020-27019 | Medium | 5.5 | 2020-11-09 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to an information disclosure vulnerability which could allow an attacker t… |
CVE-2020-10291 | High | 7.5 | 2020-11-06 | Visual Components (owned by KUKA) is a robotic simulator that allows simulating factories and robots in order toimprove planning and decision-making processes… |
CVE-2020-7128 | Critical | 9.8 | 2020-11-04 | A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-27986 | High | 7.5 | 2020-10-28 | SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the ve… |
CVE-2020-25966 | High | 7.5 | 2020-10-28 | Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpoint that leaks sensitive information about the configured assets without proper authentication. Thi… |
CVE-2020-26649 | High | 8.1 | 2020-10-22 | AtomXCMS 2.0 is affected by Incorrect Access Control via admin/dump.php |
CVE-2018-11764 | High | 8.8 | 2020-10-21 | Web endpoint authentication check is broken in Apache Hadoop 3.0.0-alpha4, 3.0.0-beta1, and 3.0.0. Authenticated users may impersonate any user even if no prox… |
CVE-2020-7370 | Medium | 4.3 | 2020-10-20 | User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of Danyil Vasilenko's Bolt Browser allows an attacker to obfusca… |
CVE-2020-7369 | Medium | 4.3 | 2020-10-20 | User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true s… |
CVE-2020-12500 | Critical | 9.8 | 2020-10-15 | Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES85… |
CVE-2020-25824 | Low | 2.4 | 2020-10-14 | Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim… |
CVE-2020-15243 | Critical | 9.1 | 2020-10-08 | Affected versions of Smartstore have a missing WebApi Authentication attribute. This vulnerability affects Smartstore shops in version 4.0.0 & 4.0.1 which have… |
CVE-2020-26567 | Medium | 5.5 | 2020-10-08 | An issue was discovered on D-Link DSR-250N before 3.17B devices. The CGI script upgradeStatusReboot.cgi can be accessed without authentication. Any access rebo… |
CVE-2020-3598 | Medium | 6.5 | 2020-10-08 | A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to access confid… |
CVE-2020-26876 | High | 7.5 | 2020-10-07 | The wp-courses plugin through 2.0.27 for WordPress allows remote attackers to bypass the intended payment step (for course videos and materials) by using the /… |
CVE-2020-26599 | Medium | 5.3 | 2020-10-06 | An issue was discovered on Samsung mobile devices with Q(10.0) software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The… |
CVE-2020-24217 | Critical | 9.8 | 2020-10-06 | An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. The file-upload endpoint does not enforce authentication. At… |
CVE-2020-6875 | Critical | 9.8 | 2020-10-05 | A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could u… |
CVE-2020-26061 | High | 7.5 | 2020-10-05 | ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability. The ResetPassword function does not… |
CVE-2020-12127 | High | 7.5 | 2020-10-02 | An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak rout… |
CVE-2020-9487 | High | 7.5 | 2020-10-01 | In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a request to create a do… |
CVE-2020-19670 | Medium | 4.9 | 2020-09-30 | In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords. |
CVE-2020-12506 | Critical | 9.1 | 2020-09-30 | Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specif… |
CVE-2020-12505 | High | 8.2 | 2020-09-30 | Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authenticatio… |
CVE-2020-25747 | Critical | 9.4 | 2020-09-25 | The Telnet service of Rubetek RV-3406, RV-3409, and RV-3411 cameras (firmware versions v342, v339) can allow a remote attacker to gain access to RTSP and ONFIV… |
CVE-2020-15851 | Critical | 9.8 | 2020-09-24 | Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Na… |
CVE-2019-16004 | Medium | 6.5 | 2020-09-23 | A vulnerability in the REST API endpoint of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to bypass authentication on a… |
CVE-2020-11856 | Critical | 9.8 | 2020-09-22 | Arbitrary code execution vulnerability on Micro Focus Operation Bridge Reporter, affecting version 10.40 and earlier. The vulnerability could allow remote atta… |
CVE-2020-3977 | Medium | 6.5 | 2020-09-22 | VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor aut… |
CVE-2020-23512 | Critical | 9.8 | 2020-09-15 | VR CAM P1 Model P1 v1 has an incorrect access control vulnerability where an attacker can obtain complete access of the device from web (remote) without authen… |
CVE-2020-16098 | Critical | 9.8 | 2020-09-15 | It is possible to enumerate access card credentials via an unauthenticated network connection to the server in versions of Command Centre v8.20 prior to v8.20… |
CVE-2020-13289 | Medium | 5.4 | 2020-09-14 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. In certain cases an invalid username could be accepted when 2FA is activat… |
CVE-2020-13920 | Medium | 5.9 | 2020-09-10 | Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to th… |
CVE-2020-5780 | Medium | 5.3 | 2020-09-10 | Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenti… |
CVE-2020-11579 | High | 7.5 | 2020-09-03 | An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php (part of the installation process) allows a remote unauthenticate… |
CVE-2020-12621 | Medium | 6.1 | 2020-09-02 | The Teamwire application 5.3.0 for Android allows physically proximate attackers to exploit a flaw related to the pass-code component. |
CVE-2020-25048 | Medium | 4.6 | 2020-08-31 | An issue was discovered on Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software. In the Lockscreen state, the Quick Share feature allows unauthenticat… |
CVE-2020-24363 | High | 8.8 | 2020-08-31 | TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker (on the same network) to submit a TDDP_RESET POST request for a factory reset… |
CVE-2020-20627 | Medium | 5.3 | 2020-08-31 | The includes/gateways/stripe/includes/admin/admin-actions.php in GiveWP plugin through 2.5.9 for WordPress allows unauthenticated settings change. |
CVE-2018-1501 | High | 7.5 | 2020-08-26 | IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missing security controls. IBM X-Force ID: 1… |
CVE-2020-15483 | Medium | 6.8 | 2020-08-26 | An issue was discovered on Nescomed Multipara Monitor M1000 devices. The physical UART debug port provides a shell, without requiring a password, with complete… |
CVE-2020-9062 | Medium | 5.3 | 2020-08-21 | Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCD… |
CVE-2020-10124 | High | 7.1 | 2020-08-21 | NCR SelfServ ATMs running APTRA XFS 05.01.00 do not encrypt, authenticate, or verify the integrity of messages between the BNA and the host computer, which cou… |
CVE-2020-24051 | Critical | 9.8 | 2020-08-21 | The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some… |
CVE-2020-3448 | Medium | 5.8 | 2020-08-17 | A vulnerability in an access control mechanism of Cisco Cyber Vision Center Software could allow an unauthenticated, remote attacker to bypass authentication a… |
CVE-2020-17475 | High | 7.5 | 2020-08-14 | Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending packet data to UDP p… |
CVE-2019-5591 | Medium | 6.5 | 2020-08-14 | A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating t… |
CVE-2020-12106 | Critical | 9.8 | 2020-08-12 | The Web portal of the WiFi module of VPNCrypt M10 2.6.5 allows unauthenticated users to send HTTP POST request to several critical Administrative functions suc… |
CVE-2020-6309 | High | 7.5 | 2020-08-12 | SAP NetWeaver AS JAVA, versions - (ENGINEAPI 7.10; WSRM 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50; J2EE-FRMW 7.10, 7.11), does not perform any authentication ch… |
CVE-2020-6294 | Critical | 9.1 | 2020-08-12 | Xvfb of SAP Business Objects Business Intelligence Platform, versions - 4.2, 4.3, platform on Unix does not perform any authentication checks for functionaliti… |
CVE-2020-16167 | Critical | 9.1 | 2020-08-07 | Missing Authentication for Critical Function in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to receive and answer calls… |
CVE-2020-15136 | Medium | 6.5 | 2020-08-06 | In ectd before versions 3.4.10 and 3.3.23, gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS au… |
CVE-2020-15127 | High | 7.5 | 2020-08-05 | In Contour ( Ingress controller for Kubernetes) before version 1.7.0, a bad actor can shut down all instances of Envoy, essentially killing the entire ingress… |