Skip to content
OpenAdvisories

Weakness (CWE)

CWE-697: Incorrect Comparison

Pillar Incomplete Mapping discouraged

The product compares two entities in a security-relevant context, but the comparison is incorrect.

Source: MITRE CWE-697

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.6
    CVE-2024-41958 Public exploit

    Two-Factor Authentication (2FA) Bypass in mailcow: dockerized

    mailcow: dockerized is an open source groupware/email suite based on docker. A vulnerability has been discovered in the two-factor authentication (2FA) mechanism. This flaw allows an authenticated attacker to bypass the 2FA protection, enabling unauthorized a…

    mailcow mailcow-dockerized
  • Medium 6.5
    CVE-2023-40037 Public exploit

    Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs

    Apache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-jms-processors org.apache.nifi:nifi-dbcp-base Maven