Threats tagged 'ghsa-hxf8-887x-mx5m'

WWBN AVideo versions up to and including 29.0 contain a critical authentication bypass vulnerability. The flaw allows attackers who have obtained a user's stored password hash to authenticate as that user by submitting the hash directly, bypassing normal password verification. This occurs due to acceptance of the stored hash as a valid credential through two separate code paths in the authentication process.