https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:28:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-04502 bdu:2024-04502 https://cve.radiocsirt.org/vuln/bdu:2024-04502 https://cve.radiocsirt.org/vuln/euvd-2026-251501 EUVD-2026-251501 https://cve.radiocsirt.org/vuln/euvd-2026-251501 https://cve.radiocsirt.org/vuln/fkie_cve-2024-4332 <p>An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (TE) 9.1.0 when TE is configured to use LDAP/Active Directory SAML authentication and its optional &#34;Auto-synchronize LDAP Users, Roles, and Groups&#34; feature is enabled. This vulnerability allows unauthenticated attackers to bypass authentication if a valid username is known. Exploitation of this vulnerability could allow remote attackers to gain privileged access to the APIs and lead to unauthorized information disclosure or modification.</p> <p>An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (TE) 9.1.0 when TE is configured to use LDAP/Active Directory SAML authentication and its optional &#34;Auto-synchronize LDAP Users, Roles, and Groups&#34; feature is enabled. This vulnerability allows unauthenticated attackers to bypass authentication if a valid username is known. Exploitation of this vulnerability could allow remote attackers to gain privileged access to the APIs and lead to unauthorized information disclosure or modification.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-4332 https://cve.radiocsirt.org/vuln/ghsa-66xx-c9r9-f474 <p>An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (TE) 9.1.0 when TE is configured to use LDAP/Active Directory SAML authentication and its optional &#34;Auto-synchronize LDAP Users, Roles, and Groups&#34; feature is enabled. This vulnerability allows unauthenticated attackers to bypass authentication if a valid username is known. Exploitation of this vulnerability could allow remote attackers to gain privileged access to the APIs and lead to unauthorized information disclosure or modification.</p> <p>An authentication bypass vulnerability has been identified in the REST and SOAP API components of Tripwire Enterprise (TE) 9.1.0 when TE is configured to use LDAP/Active Directory SAML authentication and its optional &#34;Auto-synchronize LDAP Users, Roles, and Groups&#34; feature is enabled. This vulnerability allows unauthenticated attackers to bypass authentication if a valid username is known. Exploitation of this vulnerability could allow remote attackers to gain privileged access to the APIs and lead to unauthorized information disclosure or modification.</p> https://cve.radiocsirt.org/vuln/ghsa-66xx-c9r9-f474 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1284 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Fortra Tripwire ausnutzen, um die Authentifizierung zu umgehen und dadurch Informationen offenlegen oder modifizieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Fortra Tripwire ausnutzen, um die Authentifizierung zu umgehen und dadurch Informationen offenlegen oder modifizieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1284