TL;DR: FIDO2 user presence checks can be bypassed on some services. Nextcloud and other projects using webauthn-framework <3.2.9 or >3.2.12 and < 3.3.4 are affected.… Read More »Bypassing the User Presence Check in FIDO2 Authentication
Research scientists of the Competence Center for IT Security found a missing check in a library for FIDO2 authentication.
Research scientists of the Competence Center for IT Security found an information leak in two widely used SSH clients.
Research scientists of the Competence Center for IT Security found further vulnerabilities in Poly IP phones.
Research scientists of the Competence Center for IT Security found multiple vulnerabilities in the Poly IP phones.