Approved changes feed: RSS · Atom
cpe:2.3:a:changing_information_technology:cgfido:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Changing Information Technology (cff80b03-a9ad-5188-ae44-eaf523eab4dd) |
|---|---|
| Product | Cgfido (29b672b3-b46d-5576-b80f-87c66dc28148) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-12839 |
vulnerable | 2026-06-08 06:25:36.188777 |
Changing Information Technology CGFIDO - Authentication Bypass
HIGH (8.8)
The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed on their device will send an authentication signature to the website. An unauthenticated remote attacker who obtains this signature can use it to log into the system with any device.
Published: 2024-12-31T01:32:11.422Z
Updated: 2024-12-31T15:56:18.203Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12838 |
vulnerable | 2026-06-08 06:25:36.188244 |
Changing Information Technology CGFIDO - Authentication Bypass
HIGH (8.8)
The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the identity of any user, including administrators.
Published: 2024-12-31T01:24:48.680Z
Updated: 2024-12-31T15:56:46.585Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.