Filtered by vendor Neuvector Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-32188 1 Neuvector 1 Neuvector 2024-10-16 N/A
A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malicious activity in NeuVector. This can lead to an RCE.
CVE-2019-19747 1 Neuvector 1 Neuvector 2024-08-05 9.8 Critical
NeuVector 3.1 when configured to allow authentication via Active Directory, does not enforce non-empty passwords which allows an attacker with access to the Neuvector portal to authenticate as any valid LDAP user by providing a valid username and an empty password (provided that the active directory server has not been configured to reject empty passwords).