CGFIDO vulnerabilities

2 known vulnerabilities in CGFIDO from CHANGING Information Technology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  CGFIDO: Authentication Bypass by Capture-replay

  CVE-2024-12839Dec 31, 2024CHANGING Information Technology

  The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability. If a user visits a forged website, the agent program deployed on their device will send an authentication signature to the

• 8.8 High severity

  CGFIDO: Authentication Bypass by Assumed-Immutable Data

  CVE-2024-12838Dec 31, 2024CHANGING Information Technology

  The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the identity of any user, including administrat