| Package | Affected versions | Patched versions |
|---|---|---|
| cipace | < 9.17 | 9.17 |
A Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner CIPAce before 9.17 allows attackers to bypass a protection mechanism. When the system is configured to allow login with internal accounts, an attacker can possibly obtain full authentication if the secret in a single-factor authentication scheme gets compromised.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free