CVE-2023-45552

概要

参考情報

• docs.veridiumid.com/docs/v3.5/security-advisory · Vendor Advisory
• veridiumid.com/veridium-id-authentication-platform · Product

veridiumad のその他の脆弱性

• CVE-2023-44040中 6.1In VeridiumID before 3.5.0, the identity provider page is susceptible to a cross-site scripting (XSS) vulnerability that can be exploited by…
• CVE-2023-44038中 6.5In VeridiumID before 3.5.0, the identity provider page allows an unauthenticated attacker to discover information about registered users via…
• CVE-2023-44039緊急 9.1In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollment verifications and is allow…
• CVE-2021-42791高 7.3An issue was discovered in VeridiumID VeridiumAD 2.5.3.0. The HTTP request to trigger push notifications for VeridiumAD enrolled users does …