#authenticationbypass — Public Fediverse posts

Cisco Zero-Day Exploited in Ongoing Attacks by Persistent Threat Group

A newly discovered Cisco zero-day vulnerability, CVE-2026-20182, is being exploited in ongoing attacks, allowing threat actors to gain the highest administrative access to a network controller, essentially handing them a master key to wreak havoc. This max-severity flaw has sparked a race against time for Cisco customers and national cyber…

https://osintsights.com/cisco-zero-day-exploited-in-ongoing-attacks-by-persistent-threat-group?utm_source=mastodon&utm_medium=social

#ZeroDay #Cisco #Cve202620182 #AuthenticationBypass #Sdwan

CISA Flags Cisco SD-WAN Vulnerability as Exploited

CISA has flagged a critical Cisco SD-WAN vulnerability, CVE-2026-20182, as exploited, giving federal agencies until May 17, 2026, to patch the authentication bypass flaw that could grant hackers administrative privileges. This vulnerability, scoring 10.0 on the CVSS scale, is now a top priority for remediation.

https://osintsights.com/cisa-flags-cisco-sd-wan-vulnerability-as-exploited?utm_source=mastodon&utm_medium=social

#Cisa #Cisco #Sdwan #Cve202620182 #AuthenticationBypass

CISA Flags Cisco SD-WAN Vulnerability as Exploited

CISA has flagged a critical Cisco SD-WAN vulnerability, CVE-2026-20182, as exploited, giving federal agencies until May 17, 2026, to patch the authentication bypass flaw that could grant hackers administrative privileges. This vulnerability, scoring 10.0 on the CVSS scale, is now a top priority for remediation.

https://osintsights.com/cisa-flags-cisco-sd-wan-vulnerability-as-exploited?utm_source=mastodon&utm_medium=social

#Cisa #Cisco #Sdwan #Cve202620182 #AuthenticationBypass

Hackers exploit auth flaw in Burst Statistics WordPress plugin

A critical bug in the Burst Statistics WordPress plugin, affecting 200,000 sites, allows hackers to impersonate administrators and gain unauthorized access. This alarming vulnerability, already showing signs of exploitation, puts countless websites at risk.

https://osintsights.com/hackers-exploit-auth-flaw-in-burst-statistics-wordpress-plugin?utm_source=mastodon&utm_medium=social

#Wordpress #Cve20268181 #AuthenticationBypass #Vulnerability #PluginVulnerability

Hackers exploit auth flaw in Burst Statistics WordPress plugin

A critical bug in the Burst Statistics WordPress plugin, affecting 200,000 sites, allows hackers to impersonate administrators and gain unauthorized access. This alarming vulnerability, already showing signs of exploitation, puts countless websites at risk.

https://osintsights.com/hackers-exploit-auth-flaw-in-burst-statistics-wordpress-plugin?utm_source=mastodon&utm_medium=social

#Wordpress #Cve20268181 #AuthenticationBypass #Vulnerability #PluginVulnerability

Hackers exploit auth flaw in Burst Statistics WordPress plugin

A critical bug in the Burst Statistics WordPress plugin, affecting 200,000 sites, allows hackers to impersonate administrators and gain unauthorized access. This alarming vulnerability, already showing signs of exploitation, puts countless websites at risk.

https://osintsights.com/hackers-exploit-auth-flaw-in-burst-statistics-wordpress-plugin?utm_source=mastodon&utm_medium=social

#Wordpress #Cve20268181 #AuthenticationBypass #Vulnerability #PluginVulnerability

Cisco SD-WAN Flaw Exploited in Zero-Day Attacks

A critical vulnerability in Cisco's SD-WAN system is being actively exploited, allowing attackers to bypass authentication and gain unauthorized access. This high-risk flaw, tracked as CVE-2026-20182, affects both on-prem and cloud deployments of Cisco Catalyst SD-WAN products.

https://osintsights.com/cisco-sd-wan-flaw-exploited-in-zero-day-attacks?utm_source=mastodon&utm_medium=social

#ZeroDay #Cisco #Sdwan #Cve202620182 #AuthenticationBypass

Cisco SD-WAN Flaw Exploited in Zero-Day Attacks

A critical vulnerability in Cisco's SD-WAN system is being actively exploited, allowing attackers to bypass authentication and gain unauthorized access. This high-risk flaw, tracked as CVE-2026-20182, affects both on-prem and cloud deployments of Cisco Catalyst SD-WAN products.

https://osintsights.com/cisco-sd-wan-flaw-exploited-in-zero-day-attacks?utm_source=mastodon&utm_medium=social

#ZeroDay #Cisco #Sdwan #Cve202620182 #AuthenticationBypass

Cisco SD-WAN Flaw Actively Exploited for Admin Access

Cisco is urging customers to update their SD-WAN systems immediately due to a critical vulnerability that allows hackers to bypass authentication and gain admin access. This high-severity flaw, already being exploited, could put your entire system at risk if left unpatched.

https://osintsights.com/cisco-sd-wan-flaw-actively-exploited-for-admin-access?utm_source=mastodon&utm_medium=social

#Cisco #Sdwan #Cve202620182 #AuthenticationBypass #AdminAccess

cPanel Flaw Exploited to Deploy Filemanager Backdoor

Over 2,000 attacker source IPs worldwide are currently involved in automated attacks exploiting a critical cPanel vulnerability, CVE-2026-41940, which allows remote attackers to gain elevated control and deploy malicious backdoors. This flaw has been targeted by multiple actors for a range of malicious outcomes, including…

https://osintsights.com/cpanel-flaw-exploited-to-deploy-filemanager-backdoor?utm_source=mastodon&utm_medium=social

#CpanelVulnerability #Cve202641940 #AuthenticationBypass #EmergingThreats #MalwareOperations

cPanel Vulnerability Exploited to Target Gov't, MSP Networks

A critical cPanel vulnerability, CVE-2026-41940, is being actively exploited by attackers to bypass authentication and gain control of government, military, MSP, and hosting provider networks. This alarming threat uses hard-coded credentials and cleverly defeats CAPTCHA protections to wreak havoc on vulnerable systems.

https://osintsights.com/cpanel-vulnerability-exploited-to-target-govt-msp-networks?utm_source=mastodon&utm_medium=social

#CpanelVulnerability #Cve202641940 #AuthenticationBypass #GovernmentNetworks #Msp

cPanel flaw fuels mass Sorry ransomware attacks

A critical flaw in cPanel, tracked as CVE-2026-41940, has been exploited in a massive ransomware campaign, compromising at least 44,000 IP addresses. This alarming attack has already been used in the wild as a zero-day, with threat actors accessing control panels and wreaking havoc on web hosting systems.

https://osintsights.com/cpanel-flaw-fuels-mass-sorry-ransomware-attacks?utm_source=mastodon&utm_medium=social

#Cpanel #Cve202641940 #Ransomware #SorryRansomware #AuthenticationBypass

Vulnerability Exploits Surge Against cPanel and WHM Software

A critical vulnerability, CVE-2026-41940, with a near-perfect severity score of 9.8, has been discovered in cPanel and WHM software, allowing hackers to bypass authentication and gain unauthorized access to your control panel. This flaw puts your online security at risk, so taking immediate action is crucial.

https://osintsights.com/vulnerability-exploits-surge-against-cpanel-and-whm-software?utm_source=mastodon&utm_medium=social

#Cpanel #WhmSoftware #AuthenticationBypass #Cve202641940 #VulnerabilityExploits

cPanel vulnerability exploited in wild, CISA warns

A critical cPanel vulnerability, CVE-2026-41940, with a near-perfect 9.8 CVSS score, is being exploited in the wild, putting roughly 1.5 million exposed instances at risk of being opened without a password. This flaw allows attackers to bypass authentication by cleverly manipulating the password field with hidden line breaks.

https://osintsights.com/cpanel-vulnerability-exploited-in-wild-cisa-warns?utm_source=mastodon&utm_medium=social

#Cpanel #Cve202641940 #AuthenticationBypass #EmergingThreats #VulnerabilityExploitation

cPanel vulnerability exploited in wild, CISA warns

A critical cPanel vulnerability, CVE-2026-41940, with a near-perfect 9.8 CVSS score, is being exploited in the wild, putting roughly 1.5 million exposed instances at risk of being opened without a password. This flaw allows attackers to bypass authentication by cleverly manipulating the password field with hidden line breaks.

https://osintsights.com/cpanel-vulnerability-exploited-in-wild-cisa-warns?utm_source=mastodon&utm_medium=social

#Cpanel #Cve202641940 #AuthenticationBypass #EmergingThreats #VulnerabilityExploitation

Biometric Authentication Fortifies Against Stolen Credential Attacks

In a world where stolen credentials can turn authentication systems against us, traditional multifactor authentication can become just another vulnerability to exploit. Biometric authentication offers a powerful solution, fortifying defenses against stolen credential attacks by making it…

https://osintsights.com/biometric-authentication-fortifies-against-stolen-credential-attacks?utm_source=mastodon&utm_medium=social

#BiometricAuthentication #MultifactorAuthentication #StolenCredentials #AuthenticationBypass #EmergingThreats

Microsoft Authenticator’s Unclaimed Deep Link: A Full Account Takeover Story (CVE-2026–26123)
This vulnerability is an Authentication Bypass, specifically a session hijacking issue affecting the Microsoft Authenticator app. The root cause was improper handling of deep links within the application, which allowed malicious actors to craft unclaimed deep links containing account tokens. When users clicked these links, their active sessions were hijacked, resulting in full account takeover without requiring any user interaction other than clicking a link. To exploit this, an attacker could generate a malicious deep link with an embedded account token and share it via SMS or email. The session hijack occurred due to the application's failure to verify the authenticity of deep links before processing them. This vulnerability has been assigned CVE-2026–26123. Microsoft rewarded $50,000 for this find and immediately patched the issue. To prevent similar vulnerabilities, it is crucial to thoroughly validate and sanitize all user-controlled inputs, including deep links. Key lesson: Always verify the authenticity of user-supplied data before processing it. #BugBounty #Cybersecurity #AuthenticationBypass #SessionHijacking #Infosec

https://infosecwriteups.com/microsoft-authenticators-unclaimed-deep-link-a-full-account-takeover-story-cve-2026-26123-e0409a920a02?source=rss------bug_bounty-5

LM Challenge-Response Hash Always Sent in SMB Authentication
This vulnerability is an Authentication Bypass due to the consistent transmission of LM Challenge-Response hash during SMB authentication. The application failed to disable the LM hash in favor of the more secure NTLM hash, allowing attackers to perform offline attacks against weak LM hashes. The researcher discovered this by observing the network traffic during SMB authentication and identifying the presence of LM hashes, which should have been deprecated. The LM hash is susceptible to dictionary attacks, allowing attackers to crack passwords offline. The system's flawed configuration resulted in the consistent transmission of LM hashes, making it easier for attackers to perform offline attacks. This vulnerability could lead to account takeovers, unauthorized access, and data breaches. The researcher received $5,000 for this discovery. To prevent similar issues, it is crucial to disable the LM hash and ensure that only NTLM hashes are transmitted during SMB authentication. Key lesson: Always use stronger authentication mechanisms like NTLM over deprecated LM hashes. #BugBounty #Cybersecurity #WebSecurity #AuthenticationBypass #SMB

https://hackerone.com/reports/3584491

The Logic Flaw That Leads to Total Control: Mastering Account Takeovers in 2026
This vulnerability falls under the Authentication Bypass class, specifically Logical Account Takeover. ZACK0X01's tutorial reveals that attackers can bypass multi-factor authentication (MFA) by exploiting subtle disconnects in authentication flows. The researcher manipulates responses and leverages Insecure Direct Object References (IDOR) to gain control of any user account. By observing patterns in error messages, the researcher found opportunities to intercept MFA codes or bypass MFA checks entirely. The critical severity (CVSS ~9.8) demonstrates the devastating impact: complete account takeover and unauthorized access to sensitive data. The tutorial offers actionable insights for finding this high-impact vulnerability class in web applications. Key lesson: Look beyond syntax errors, focus on business logic flaws to master account takeovers. #BugBounty #WebSecurity #AuthenticationBypass #IDOR #AccountTakeover

https://infosecwriteups.com/the-logic-flaw-that-leads-to-total-control-mastering-account-takeovers-in-2026-aecef6d30bd9?source=rss------bug_bounty-5

The Logic Flaw That Leads to Total Control: Mastering Account Takeovers in 2026
This vulnerability falls under the Authentication Bypass class, specifically Logical Account Takeover. ZACK0X01's tutorial reveals that attackers can bypass multi-factor authentication (MFA) by exploiting subtle disconnects in authentication flows. The researcher manipulates responses and leverages Insecure Direct Object References (IDOR) to gain control of any user account. By observing patterns in error messages, the researcher found opportunities to intercept MFA codes or bypass MFA checks entirely. The critical severity (CVSS ~9.8) demonstrates the devastating impact: complete account takeover and unauthorized access to sensitive data. The tutorial offers actionable insights for finding this high-impact vulnerability class in web applications. Key lesson: Look beyond syntax errors, focus on business logic flaws to master account takeovers. #BugBounty #WebSecurity #AuthenticationBypass #IDOR #AccountTakeover

https://infosecwriteups.com/the-logic-flaw-that-leads-to-total-control-mastering-account-takeovers-in-2026-aecef6d30bd9?source=rss------bug_bounty-5

TryHackme Walkthrough — Overpass
The vulnerability discovered was an Authentication Bypass due to weak password hashing. The application used the MD5 algorithm, which is insecure and easily reversible, for password hashing. By analyzing leaked passwords from a previous data breach, the researcher found weak credentials that allowed them to guess the hash of the target user account (e.g., 'admin' => '5eb6fb193f2cc04e9bf03a8971b5955d'). Using Burp Suite's Intruder tool, they injected a payload to brute-force the login with the known hash. The application accepted the hashed password without verifying its integrity, leading to unauthorized access. This flaw could have resulted in sensitive data exposure and potential account takeovers. The researcher received a reward for reporting this issue. Proper remediation involves using strong password hashing algorithms such as BCrypt or Argon2. Key lesson: Always use secure hashing algorithms (e.g., BCrypt, Argon2) instead of insecure ones like MD5 to protect user credentials. #BugBounty #Cybersecurity #WebSecurity #AuthenticationBypass #PasswordHashing

https://seclak07.medium.com/tryhackme-walkthrough-overpass-838c1e204334?source=rss------bug_bounty-5

TryHackme Walkthrough — Overpass
The vulnerability discovered was an Authentication Bypass due to weak password hashing. The application used the MD5 algorithm, which is insecure and easily reversible, for password hashing. By analyzing leaked passwords from a previous data breach, the researcher found weak credentials that allowed them to guess the hash of the target user account (e.g., 'admin' => '5eb6fb193f2cc04e9bf03a8971b5955d'). Using Burp Suite's Intruder tool, they injected a payload to brute-force the login with the known hash. The application accepted the hashed password without verifying its integrity, leading to unauthorized access. This flaw could have resulted in sensitive data exposure and potential account takeovers. The researcher received a reward for reporting this issue. Proper remediation involves using strong password hashing algorithms such as BCrypt or Argon2. Key lesson: Always use secure hashing algorithms (e.g., BCrypt, Argon2) instead of insecure ones like MD5 to protect user credentials. #BugBounty #Cybersecurity #WebSecurity #AuthenticationBypass #PasswordHashing

https://seclak07.medium.com/tryhackme-walkthrough-overpass-838c1e204334?source=rss------bug_bounty-5

A critical flaw in a popular WordPress theme has fueled over 150,000 cyberattack attempts, hitting SMEs hard. Could your site be next? Learn what's behind the spike and how to protect yourself.

https://thedefendopsdiaries.com/exploitation-of-jobmonster-wordpress-theme-vulnerability-trends-impact-and-mitigation/

#wordpresssecurity
#jobmonster
#cyberattacks
#authenticationbypass
#smeprotection

A critical flaw in a popular WordPress theme has fueled over 150,000 cyberattack attempts, hitting SMEs hard. Could your site be next? Learn what's behind the spike and how to protect yourself.

https://thedefendopsdiaries.com/exploitation-of-jobmonster-wordpress-theme-vulnerability-trends-impact-and-mitigation/

#wordpresssecurity
#jobmonster
#cyberattacks
#authenticationbypass
#smeprotection

A critical flaw in a popular WordPress theme has fueled over 150,000 cyberattack attempts, hitting SMEs hard. Could your site be next? Learn what's behind the spike and how to protect yourself.

https://thedefendopsdiaries.com/exploitation-of-jobmonster-wordpress-theme-vulnerability-trends-impact-and-mitigation/

#wordpresssecurity
#jobmonster
#cyberattacks
#authenticationbypass
#smeprotection

A critical flaw in a popular WordPress theme has fueled over 150,000 cyberattack attempts, hitting SMEs hard. Could your site be next? Learn what's behind the spike and how to protect yourself.

https://thedefendopsdiaries.com/exploitation-of-jobmonster-wordpress-theme-vulnerability-trends-impact-and-mitigation/

#wordpresssecurity
#jobmonster
#cyberattacks
#authenticationbypass
#smeprotection

A tiny flaw in the Service Finder theme could let hackers in—and it's easier to fix than you think. Discover practical steps like regular audits and multi-factor authentication that can lock your site down.

https://thedefendopsdiaries.com/mitigating-authentication-bypass-in-the-service-finder-wordpress-theme-practical-steps-and-strategies/

#wordpresssecurity
#authenticationbypass
#websitemitigation
#servicefindertheme
#cybersecuritytips

A tiny flaw in the Service Finder theme could let hackers in—and it's easier to fix than you think. Discover practical steps like regular audits and multi-factor authentication that can lock your site down.

https://thedefendopsdiaries.com/mitigating-authentication-bypass-in-the-service-finder-wordpress-theme-practical-steps-and-strategies/

#wordpresssecurity
#authenticationbypass
#websitemitigation
#servicefindertheme
#cybersecuritytips

A tiny flaw in the Service Finder theme could let hackers in—and it's easier to fix than you think. Discover practical steps like regular audits and multi-factor authentication that can lock your site down.

https://thedefendopsdiaries.com/mitigating-authentication-bypass-in-the-service-finder-wordpress-theme-practical-steps-and-strategies/

#wordpresssecurity
#authenticationbypass
#websitemitigation
#servicefindertheme
#cybersecuritytips

A tiny flaw in the Service Finder theme could let hackers in—and it's easier to fix than you think. Discover practical steps like regular audits and multi-factor authentication that can lock your site down.

https://thedefendopsdiaries.com/mitigating-authentication-bypass-in-the-service-finder-wordpress-theme-practical-steps-and-strategies/

#wordpresssecurity
#authenticationbypass
#websitemitigation
#servicefindertheme
#cybersecuritytips

High-severity vulnerability in Passwordstate credential manager. Patch now. - The maker of Passwordstate, an enterprise-grade password man... - https://arstechnica.com/security/2025/08/high-severity-vulnerability-in-passwordstate-credential-manager-patch-now/ #authenticationbypass #passwordmanagers #vulnerabilities #security #patches #biz&it

Passwordstate, a key tool for thousands of organizations, now faces a critical flaw that lets attackers bypass MFA with a clever URL trick. Could your sensitive data be at risk? Read on to learn why immediate updates might be a must.

https://thedefendopsdiaries.com/understanding-the-passwordstate-vulnerability-a-call-for-enhanced-security-measures/

#passwordstate
#cybersecurity
#vulnerability
#infosec
#authenticationbypass

Passwordstate, a key tool for thousands of organizations, now faces a critical flaw that lets attackers bypass MFA with a clever URL trick. Could your sensitive data be at risk? Read on to learn why immediate updates might be a must.

https://thedefendopsdiaries.com/understanding-the-passwordstate-vulnerability-a-call-for-enhanced-security-measures/

#passwordstate
#cybersecurity
#vulnerability
#infosec
#authenticationbypass

Passwordstate, a key tool for thousands of organizations, now faces a critical flaw that lets attackers bypass MFA with a clever URL trick. Could your sensitive data be at risk? Read on to learn why immediate updates might be a must.

https://thedefendopsdiaries.com/understanding-the-passwordstate-vulnerability-a-call-for-enhanced-security-measures/

#passwordstate
#cybersecurity
#vulnerability
#infosec
#authenticationbypass

Passkey Login Bypassed via WebAuthn Process Manipulation https://www.securityweek.com/passkey-login-bypassed-via-webauthn-process-manipulation/ #authenticationbypass #browserextension #Identity&Access #Featured #passkey

Passkey Login Bypassed via WebAuthn Process Manipulation https://www.securityweek.com/passkey-login-bypassed-via-webauthn-process-manipulation/ #authenticationbypass #browserextension #Identity&Access #Featured #passkey

Flaws Expose 100 Dell Laptop Models to Implants, Windows Login Bypass https://www.securityweek.com/flaws-expose-100-dell-laptop-models-to-implants-windows-login-bypass/ #authenticationbypass #EndpointSecurity #vulnerability #Featured #firmware #Revault #laptop #Dell

Flaws Expose 100 Dell Laptop Models to Implants, Windows Login Bypass https://www.securityweek.com/flaws-expose-100-dell-laptop-models-to-implants-windows-login-bypass/ #authenticationbypass #EndpointSecurity #vulnerability #Featured #firmware #Revault #laptop #Dell

Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications https://www.securityweek.com/flaw-in-vibe-coding-platform-base44-exposed-private-enterprise-applications/ #ArtificialIntelligence #authenticationbypass #ApplicationSecurity #vulnerability #vibecoding #Base44 #Wix #AI

Flaw in Vibe Coding Platform Base44 Exposed Private Enterprise Applications https://www.securityweek.com/flaw-in-vibe-coding-platform-base44-exposed-private-enterprise-applications/ #ArtificialIntelligence #authenticationbypass #ApplicationSecurity #vulnerability #vibecoding #Base44 #Wix #AI

Critical Authentication Bypass Flaw Patched in Teleport – Source: www.securityweek.com https://ciso2ciso.com/critical-authentication-bypass-flaw-patched-in-teleport-source-www-securityweek-com/ #rssfeedpostgeneratorecho #authenticationbypass #CyberSecurityNews #vulnerabilities #securityweekcom #Vulnerability #securityweek #Teleport

Critical Authentication Bypass Flaw Patched in Teleport https://www.securityweek.com/critical-authentication-bypass-flaw-patched-in-teleport/ #authenticationbypass #Vulnerabilities #vulnerability #Teleport

Critical Authentication Bypass Flaw Patched in Teleport https://www.securityweek.com/critical-authentication-bypass-flaw-patched-in-teleport/ #authenticationbypass #Vulnerabilities #vulnerability #Teleport

CISA Warns of CrushFTP Exploit Letting Attackers Bypass Authentication https://thecyberexpress.com/cisa-adds-cve-2025-31161-to-kev-catalog/ #authenticationbypass #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202531161 #CyberNews #CrushFTP

GitLab's Critical Vulnerability Fixes: What You Need to Know

https://thedefendopsdiaries.com/gitlabs-critical-vulnerability-fixes-what-you-need-to-know/

#gitlab
#cybersecurity
#vulnerability
#saml
#authenticationbypass

Krytyczny błąd 0day w Fortigate. Jest w trakcie exploitacji, przejmują dostępy do VPNa w firmach.

Luka umożliwia pełne przejęcie urządzenia z poziomu Internetu. Tj. zdobycie uprawnień super-admina. Podatność jest wykorzystywana w realnych atakach, najprawdopodobniej od okolic grudnia 2024. Nie wiadomo dokładnie jaka grupa odpowiedzialna jest za ataki. W ramach ataków wykonywane są takie operacje jak: Podatne są FortiOS (7.0.0 do 7.0.16) oraz FortiProxy (linia 7.0.x...

#WBiegu #0Day #AuthBypass #AuthenticationBypass #Fortigate #VPN

https://sekurak.pl/krytyczny-blad-0day-w-fortigate-jest-w-trakcie-exploitacji-przejmuja-dostepy-do-vpna-w-firmach/

GitLab Urges Organizations To Patch For Authentication Bypass Vulnerability https://cybersecuritynews.com/gitlab-authentication-bypass-vulnerability/ #AuthenticationBypass #GitLabVulnerability #CyberSecurityNews #cybersecuritynews #SecurityUpdates #Vulnerability #CVE202445409

Critical Veeam Backup Enterprise Manager authentication bypass bug – Source: securityaffairs.com https://ciso2ciso.com/critical-veeam-backup-enterprise-manager-authentication-bypass-bug-source-securityaffairs-com/ #rssfeedpostgeneratorecho #ITInformationSecurity #authenticationbypass #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #BreakingNews #SecurityNews #hackingnews #Security #hacking #Veeam

Critical GitHub Enterprise Server Flaw Allows Authentication Bypass

Date: May 21, 2024

CVE: [[CVE-2024-4985]]

Vulnerability Type: Improper Authentication

CWE: [[CWE-287]]

Sources: Cyber Security News, SecurityWeek, The Hacker News

Issue Summary

A critical vulnerability in GitHub Enterprise Server, identified as CVE-2024-4985, was discovered that allows attackers to bypass authentication. This flaw, found in versions 3.9.14, 3.10.11, 3.11.9, and 3.12.3, permits unauthorized access to repositories and sensitive data by exploiting a weakness in the SAML SSO authentication process.

Technical Key Findings

The vulnerability arises from a logic error in the SAML SSO authentication process, where the server fails to verify the validity of digital signatures on SAML responses properly. Attackers can craft SAML assertions with any certificate, which the server incorrectly accepts, allowing the spoofing of user identities, including admin accounts.

Vulnerable Products

• GitHub Enterprise Server versions 3.9.14
• GitHub Enterprise Server versions 3.10.11
• GitHub Enterprise Server versions 3.11.9
• GitHub Enterprise Server versions 3.12.3

Impact Assessment

Exploitation of this vulnerability could lead to unauthorized access to private repositories, sensitive data, and administrative controls. This can result in data breaches, code tampering, and potential intellectual property theft.

Patches or Workaround

GitHub has released patched versions (3.9.15, 3.10.12, 3.11.10, and 3.12.4) to address this issue. As an interim measure, enabling SAML certificate pinning can mitigate the risk. Additionally, auditing access logs for suspicious activity and rotating credentials is advised.

Tags

#GitHub #CVE20244985 #SAML #AuthenticationBypass #SecurityFlaw #EnterpriseSecurity #DataBreach #PatchUpdate #CyberSecurity

Critical GitHub Enterprise Server Flaw Allows Authentication Bypass

Date: May 21, 2024

CVE: [[CVE-2024-4985]]

Vulnerability Type: Improper Authentication

CWE: [[CWE-287]]

Sources: Cyber Security News, SecurityWeek, The Hacker News

Issue Summary

A critical vulnerability in GitHub Enterprise Server, identified as CVE-2024-4985, was discovered that allows attackers to bypass authentication. This flaw, found in versions 3.9.14, 3.10.11, 3.11.9, and 3.12.3, permits unauthorized access to repositories and sensitive data by exploiting a weakness in the SAML SSO authentication process.

Technical Key Findings

The vulnerability arises from a logic error in the SAML SSO authentication process, where the server fails to verify the validity of digital signatures on SAML responses properly. Attackers can craft SAML assertions with any certificate, which the server incorrectly accepts, allowing the spoofing of user identities, including admin accounts.

Vulnerable Products

• GitHub Enterprise Server versions 3.9.14
• GitHub Enterprise Server versions 3.10.11
• GitHub Enterprise Server versions 3.11.9
• GitHub Enterprise Server versions 3.12.3

Impact Assessment

Exploitation of this vulnerability could lead to unauthorized access to private repositories, sensitive data, and administrative controls. This can result in data breaches, code tampering, and potential intellectual property theft.

Patches or Workaround

GitHub has released patched versions (3.9.15, 3.10.12, 3.11.10, and 3.12.4) to address this issue. As an interim measure, enabling SAML certificate pinning can mitigate the risk. Additionally, auditing access logs for suspicious activity and rotating credentials is advised.

Tags

#GitHub #CVE20244985 #SAML #AuthenticationBypass #SecurityFlaw #EnterpriseSecurity #DataBreach #PatchUpdate #CyberSecurity