CWE-287 Web Vulnerability & Security Checks

Select Category

Critical
High
Medium
Low
Best Practice
Information

Search Vulnerability

Vulnerability Name

Classifications

Severity

Authentication Bypass in Ivanti Connect Secure and Policy Secure (CVE-2023-46805)

PCI v3.2-6.5.1, CAPEC-114,115, CWE-287, HIPAA-164.306(a), ISO27001-A.13.1.1, WASC-1, OWASP 2013-A9, OWASP 2017-A9, CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

High

JWT Signature Bypass via None Algorithm

CWE-287, OWASP 2017-A2, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

High

JWT Signature is not Verified

CWE-287, OWASP 2017-A2, CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

High

Build your resistance to threats. And save hundreds of hours each month.

Get a demo See how it works

Web Application Vulnerabilities Index

Select Category

Search Vulnerability

Build your resistance to threats. And save hundreds of hours each month.