Количество 2
Количество 2
CVE-2021-38299
больше 4 лет назад
Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control. An attacker that controls a user's system is able to login to a vulnerable service using an attached FIDO2 authenticator without passing a check of the user presence.
CVSS3: 9.8
EPSS: Низкий
GHSA-6whf-q6p5-84wg
больше 4 лет назад
Improper Access Control in Webauthn Framework
CVSS3: 9.8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-38299 Webauthn Framework 3.3.x before 3.3.4 has Incorrect Access Control. An attacker that controls a user's system is able to login to a vulnerable service using an attached FIDO2 authenticator without passing a check of the user presence. | CVSS3: 9.8 | 0% Низкий | больше 4 лет назад |
| GHSA-6whf-q6p5-84wg Improper Access Control in Webauthn Framework | CVSS3: 9.8 | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу
20