Rezultati pretraživanja za 'Proizvođač: yubico'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2020-15001 | 2.9 | An information leak was discovered on Yubico YubiKey 5 NFC devices 5.0.0 to 5.2.6 and 5.3.0 to 5.3.1. The OTP application allows a user to set optional access codes on OTP slots. This access code is intended to prevent unauthorized changes to OTP con | 2021-07-21 11:39:00 | 2020-07-09 19:15:00 |
| CVE-2020-13132 | 2.1 | An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. This could be used to cause a denial of service attack | 2021-07-21 11:39:00 | 2020-07-09 18:15:00 |
| CVE-2021-32489 | 3.5 | An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device because response_msg.st.len=8 ca | 2021-05-19 18:44:00 | 2021-05-10 22:15:00 |
| CVE-2021-27217 | 3.5 | An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device. Out-of-bounds reads performed b | 2021-03-26 20:07:00 | 2021-03-04 18:15:00 |
| CVE-2019-12210 | 5.5 | In Yubico pam-u2f 1.0.7, when configured with debug and a custom debug log file is set using debug_file, that file descriptor is not closed when a new process is spawned. This leads to the file descriptor being inherited into the child process; the c | 2020-08-24 17:37:00 | 2019-06-04 21:29:00 |
| CVE-2011-4120 | 7.5 | Yubico PAM Module before 2.10 performed user authentication when 'use_first_pass' PAM configuration option was not used and the module was configured as 'sufficient' in the PAM configuration. A remote attacker could use this flaw to circumvent common | 2020-08-18 15:05:00 | 2019-11-26 05:15:00 |
| CVE-2020-15000 | 4.3 | A PIN management problem was discovered on Yubico YubiKey 5 devices 5.2.0 to 5.2.6. OpenPGP has three passwords: Admin PIN, Reset Code, and User PIN. The Reset Code is used to reset the User PIN, but it is disabled by default. A flaw in the implement | 2020-07-21 16:21:00 | 2020-07-09 18:15:00 |
| CVE-2020-13131 | 1.9 | An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. A malicious PIV token can misreport the returned le | 2020-07-16 19:04:00 | 2020-07-09 18:15:00 |
| CVE-2020-10185 | 6.8 | The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP validation service with a non-default configuration | 2020-03-12 23:15:00 | 2020-03-05 23:15:00 |
| CVE-2020-10184 | 5.0 | The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of service, aka SQL injection. NOTE: this issue is potentially relevant to persons outside Yubico w | 2020-03-12 23:15:00 | 2020-03-05 23:15:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/3
Zapisa po stranici: