The mci_check_login function in api/soap/mc_api.php in the SOAP API in MantisBT before 1.2.9 allows remote attackers to bypass authentication via a null password. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. This Improper Authentication vulnerability could allow attackers to bypass authentication mechanisms to gain unauthorized access.
PHP
Authentication Bypass
Mantisbt
NVD
GitHub
CVSS 2.0
7.5
EPSS
1.4%
Unspecified vulnerability in HP System Management Homepage (SMH) before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.
Denial Of Service
HP
System Management Homepage
NVD
CVSS 2.0
7.5
EPSS
1.3%