Vulnerabilities
Critical JWT Bypass in Eclipse ioFog Controller Allows Admin Privilege Escalation
A flaw in Eclipse ioFog Controller versions 3.8.0 through 3.9.1 lets attackers bypass authentication on WebSocket routes to gain admin access.
Eclipse Foundation
Everything Threat Times has reported about Eclipse Foundation: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Critical bypass flaw in Eclipse EthereumAuthenticator allows unauthenticated access
A CVSS 9.3 vulnerability in Eclipse EthereumAuthenticator permits unauthorized access if request paths contain the login URL.