CyberzSOC

This vulnerability allows attackers to bypass authentication and access sensitive data [1]. The vulnerability is actively being exploited, and there is an available proof of concept (PoC) The vulnerability CVE-2024-5806, with a CVSS score of 9,1, is an Improper Authentication vulnerability that can lead to Authentication Bypass. Researchers have identified at least two attack scenarios for exploiting this vulnerability. First, the vulnerability allows the use of a null string as a public encryption key during authentication. This can enable unauthorised access, allowing attackers to log in as an existing Second, attackers can obtain cryptographic hashes that mask user passwords.