Musa Atalay

Missing authentication for critical function vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.

**Name of the Vulnerable Software and Affected Versions** Enterprise Video Platform versions 3.11.0.0 through 3.24.9 **Description** An unverified password change issue in the Vimesoft Inc. Enterprise Video Platform enables authentication bypass, allowing an attacker to gain unauthorized access to the system. **Recommendations** Update Enterprise Video Platform to version 3.25.0 or later.

Authorization bypass through User-Controlled key vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.

Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Enterprise Video Platform: from 3.11.0.0 before 3.25.0.

**Name of the Vulnerable Software and Affected Versions** Beamsec PhishPro versions prior to 7.5.4.2 **Description** An incorrect use of privileged APIs allows for privilege abuse in Beamsec PhishPro. **Recommendations** Update Beamsec PhishPro to version 7.5.4.2 or later.

**Name of the Vulnerable Software and Affected Versions** Apinizer Management Console versions prior to 2024.05.1 **Description** The issue allows for authentication bypass using an alternate path or channel. This can potentially lead to unauthorized access. **Recommendations** For versions prior to 2024.05.1, update to version 2024.05.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apinizer Management Console versions prior to 2024.05.1 **Description** The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability in the Apinizer Management Console. This vulnerability allows exploitation due to incorrectly configured access control security levels. **Recommendations** For versions prior to 2024.05.1, update to version 2024.05.1 or later to resolve the issue.