CVE-2019-6481

Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to access a forgotten dev menu to insert user passwords that otherwise would require the user to accept a second-factor request in a mobile app." approach, related to a "Multifactor Auth Bypass, Full Disk Encryption Bypass" issue affecting the Affected Chrome Plugin component.

• CWE-287

• http://packetstormsecurity.com/files/152139/Abine-Blur-7.8.24x-Authentication-Bypass.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Mar/33Mailing List, Third Party Advisory
• https://redcoded.com/cve/2018/03/10/CVE.htmlExploit, Third Party Advisory
• https://redcoded.com/cve/2019/03/18/CVE.htmlExploit, Third Party Advisory
• http://packetstormsecurity.com/files/152139/Abine-Blur-7.8.24x-Authentication-Bypass.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Mar/33Mailing List, Third Party Advisory
• https://redcoded.com/cve/2018/03/10/CVE.htmlExploit, Third Party Advisory
• https://redcoded.com/cve/2019/03/18/CVE.htmlExploit, Third Party Advisory

Published

Mar 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6474A missing check on incoming client requests can be exploited…6.5
• CVE-2019-6475Mirror zones are a BIND feature allowing recursive servers t…7.5
• CVE-2019-6476A defect in code added to support QNAME minimization can cau…7.5
• CVE-2019-6477With pipelining enabled each incoming query on a TCP connect…7.5
• CVE-2019-6478Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2019-6479Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2019-6485Citrix NetScaler Gateway 12.1 before build 50.31, 12.0 befor…
• CVE-2019-6486Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 a…
• CVE-2019-6487TP-Link WDR Series devices through firmware v3 (such as TL-W…
• CVE-2019-6488The string component in the GNU C Library (aka glibc or libc…
• CVE-2019-6489Certain Lexmark CX, MX, X, XC, XM, XS, and 6500e devices bef…
• CVE-2019-6491RISI Gestao de Horarios v3201.09.08 rev.23 allows SQL Inject…