Vulnerabilities (CVE)

Filtered by CWE-602
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-23570 1 Gallagher 1 Command Centre 2024-01-05 N/A 8.1 HIGH
Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undefined behavior. This issue affects: Gallagher Command Centre 8.90 prior to vEL8.90.1620 (MR2), all versions of 8.80 and prior.
CVE-2022-1525 1 Cognex 2 3d-a1000 Dimensioning System, 3d-a1000 Dimensioning System Firmware 2023-12-10 N/A 9.1 CRITICAL
The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.