CVE Vulnerabilities

CVE-2019-6481

Improper Authentication

Published: Mar 29, 2019 | Modified: Jul 21, 2021
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Abine Blur 7.8.2431 allows remote attackers to conduct Second-Factor Auth Bypass attacks by using the Perform a right-click operation to access a forgotten dev menu to insert user passwords that otherwise would require the user to accept a second-factor request in a mobile app. approach, related to a Multifactor Auth Bypass, Full Disk Encryption Bypass issue affecting the Affected Chrome Plugin component.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Blur Abine 7.8.2431 (including) 7.8.2431 (including)

Potential Mitigations

References