KYC solutions vulnerabilities
4 known vulnerabilities in KYC solutions from Meon. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.7 High severity
KYC solutions: Cleartext Transmission of Sensitive Information
This vulnerability exists in the Meon KYC solutions due to transmission of sensitive data in plain text within the response payloads of certain API endpoints. An authenticated remote attacker could exploit this vulnerability by intercepting API response that c
- 8.2 High severity
KYC solutions: Session Fixation
This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process. A remote attacker could exploit this vulnerability by intercepting and manipulating the responses through
- 8.2 High severity
KYC solutions: Client-Side Enforcement of Server-Side Security
This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints. A remote attacker could exploit this vulnerability by intercepting the request and removing the Captcha parameter leading to byp
- 8.2 High severity
KYC solutions: Improper Restriction of Excessive Authentication Attempts
This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute for