Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Veridiumid Subscribe
Filtered by product Veridiumad
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-42791 1 Veridiumid 1 Veridiumad 2022-02-02 4.9 MEDIUM 7.3 HIGH
An issue was discovered in VeridiumID VeridiumAD 2.5.3.0. The HTTP request to trigger push notifications for VeridiumAD enrolled users does not enforce proper access control. A user can trigger push notifications for any other user. The text contained in the push notification can also be modified. If a user who receives the notification accepts it, then the user who triggered the notification can obtain the accepting user's login certificate.