April 18, 2023, 9:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow
changes to administrative credentials, leading to potential remote code execution without
requiring prior authentication on the Java RMI interface.

authentication code code execution credentials critical cve cve-2023-29411 cwe function interface java missing remote code remote code execution vulnerability

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Senior Cloud Security Engineer

@ Hearst | Charlotte, NC, United States

Junior Cybersecurity Analyst

@ SavageOne | Johannesburg, GP, South Africa

Information Security Risk Analyst

@ Take-Two Interactive Software, Inc. | Bengaluru, Karnataka, India