Linotp

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-49706 Dec 19, 19:15 MEDIUM This Month

Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers to escalate privileges, thereby allowing them to act as and with the permissions. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Privilege Escalation Race Condition Virtual Appliance Linotp

NVD

CVSS 3.1

6.8

EPSS

0.6%

CVE-2019-12887 Jun 27, 14:15 PyPI HIGH PATCH This Week

KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2). Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Linotp

NVD

CVSS 3.0

8.1

EPSS

1.2%

CVE-2023-49706

EPSS 1% CVSS 6.8

MEDIUM This Month

Privilege Escalation Race Condition Virtual Appliance +1

NVD

CVE-2019-12887 PyPI

EPSS 1% CVSS 8.1

HIGH PATCH This Week

Information Disclosure Linotp

NVD