Threats Tagged 'cwe-291'

In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks

CVE-2026-86485 is a vulnerability in JetBrains YouTrack before version 2026.2.18634 that allows IP spoofing via HTTP headers, enabling forged Bitbucket webhooks. The issue is classified under CWE-291 (Improper Authentication). The CVSS score is 3.5 (low severity), indicating limited impact primarily on confidentiality. No known exploits are reported in the wild. The vulnerability requires user interaction and local access vector with low attack complexity and no privileges required.

CVE-2025-66602 is a medium-severity vulnerability in Yokogawa Electric Corporation's FAST/TOOLS SCADA system versions R9.01 to R10.04. The flaw arises because the web server accepts access by IP address without sufficient authentication, enabling potential unauthorized access. This weakness could be exploited by a worm that randomly scans IP addresses to intrude into networks running the affected FAST/TOOLS packages (RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB). The vulnerability does not require user interaction or privileges and can be exploited remotely over the network, potentially compromising confidentiality. No known exploits are currently in the wild, and no patches have been published yet. European organizations using FAST/TOOLS in critical infrastructure sectors such as energy, manufacturing, or utilities may face increased risk, especially in countries with significant Yokogawa deployments. Mitigation should focus on network segmentation, restricting IP-based access, and monitoring for anomalous scanning activity. Given the critical role of FAST/TOOLS in industrial control, exploitation could disrupt operations or leak sensitive data, warranting proactive defense measures.

MediumVulnerabilityGermanyFranceItaly+7#cve#cve-2025-66602#cwe-291

Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information is stored. Therefore, it is possible to spoof the IP address of a logged-in user to gain access to the Access Manager web interface.

HighVulnerabilityGermanySwitzerlandFrance+7#cve#cve-2025-59101#cwe-291

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to 25.2.169 and Application prior to 25.2.1518 (VA and SaaS deployments) expose Docker internal networks in a way that allows an attacker on the same external L2 segment — or an attacker able to add routes using the appliance as a gateway — to reach container IPs directly. This grants access to internal services (HTTP APIs, Redis, MySQL, etc.) that are intended to be isolated inside the container network. Many of those services are accessible without authentication or are vulnerable to known exploitation chains. As a result, compromise of a single reachable endpoint or basic network access can enable lateral movement, remote code execution, data exfiltration, and full system compromise. This vulnerability has been identified by the vendor as: V-2025-003 — Insecure Access to Docker Instance from WAN.

A vulnerability was found in Uniway Router 2.0. It has been declared as critical. This vulnerability affects unknown code of the component Administrative Web Interface. The manipulation leads to reliance on ip address for authentication. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. VDB-249766 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

MediumVulnerabilityGermanyFranceItaly+7#cve#cve-2023-7211#cwe-291