CVE-2023-44039 | BDVDB-2026-229762 Detail

Description#

In VeridiumID before 3.5.0, the WebAuthn API allows an internal unauthenticated attacker (who can pass enrollment verifications and is allowed to enroll a FIDO key) to register their FIDO authenticator to a victim’s account and consequently take over the account.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12024-04-03Record published in the CVE List.
2. Version 22024-08-21Most recent update recorded in the CVE List.