What is the official website of Allianz Maroc ?

The official website of Allianz Maroc is https://www.allianz.ma.

What is Allianz Maroc's cybersecurity risk score?

Allianz Maroc has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Allianz Maroc experienced?

According to Rankiteo, Allianz Maroc currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Allianz Maroc been affected by any supply chain cyber incidents ?

According to Rankiteo, Allianz Maroc has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Snowflake (Incident ID: MEREQUUNIMAEMGMGOOTOYSNOALLORARIPTIC1775528897) Gainsight (Incident ID: GAI0292402112125)

Does Allianz Maroc have SOC 2 Type 1 certification ?

According to Rankiteo, Allianz Maroc is not certified under SOC 2 Type 1.

Does Allianz Maroc have SOC 2 Type 2 certification ?

According to Rankiteo, Allianz Maroc does not hold a SOC 2 Type 2 certification.

Does Allianz Maroc comply with GDPR ?

According to Rankiteo, Allianz Maroc is not listed as GDPR compliant.

Does Allianz Maroc have PCI DSS certification ?

According to Rankiteo, Allianz Maroc does not currently maintain PCI DSS compliance.

Does Allianz Maroc comply with HIPAA ?

According to Rankiteo, Allianz Maroc is not compliant with HIPAA regulations.

Does Allianz Maroc have ISO 27001 certification ?

According to Rankiteo,Allianz Maroc is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Allianz Maroc operate in ?

Allianz Maroc operates primarily in the Insurance industry.

How many employees does Allianz Maroc have ?

Allianz Maroc employs approximately 476 people worldwide.

Does Allianz Maroc own any subsidiaries ?

Allianz Maroc presently has no subsidiaries across any sectors.

How many LinkedIn followers does Allianz Maroc have ?

Allianz Maroc's official LinkedIn profile has approximately 91,441 followers.

What is the NAICS classification code for Allianz Maroc ?

Allianz Maroc is classified under the NAICS code 524, which corresponds to Insurance Carriers and Related Activities.

Does Allianz Maroc have a Crunchbase profile ?

No, Allianz Maroc does not have a profile on Crunchbase.

Does Allianz Maroc have a LinkedIn profile ?

Yes, Allianz Maroc maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/allianz-maroc.

How many cybersecurity incidents has Allianz Maroc experienced ?

As of August 29, 2026, Rankiteo reports that Allianz Maroc has experienced 12 cybersecurity incidents.

How many peer or competitor companies does Allianz Maroc have ?

Allianz Maroc has an estimated 15,689 peer or competitor companies worldwide.

What types of cybersecurity incidents has Allianz Maroc faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Allianz Maroc

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

Allianz Maroc Vendor Cyber Rating & Cyber Score

allianz.ma

Add Your Compliance Badge

Allianz Maroc a pour mission d’accompagner ses assurés particuliers et professionnels à chaque étape de leur vie pour aller de l’avant.

Allianz Maroc A.I CyberSecurity Scoring

Scoring History

Allianz Maroc

Allianz Maroc CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Allianz

Ransomware

100

12/2025

Snowflake

MEREQUUNIMAEMGM...

Allianz Maroc

Breach

10/2025

ALL229272210012...

Allianz Maroc

Ransomware

100

8/2025

ALL316081425

Allianz

Breach

8/2025

Gainsight

GAI029240211212...

Allianz Life

Breach

7/2025

ALL1772058877

Allianz Maroc

Cyber Attack

7/2025

ALL259272510012...

Allianz Maroc

Ransomware

100

6/2025

ALL436204310012...

Allianz Maroc

Breach

100

5/2025

ALL505090325

Allianz Maroc

Ransomware

100

6/2024

ALL029340210092...

Allianz Maroc

Breach

6/2024

ALL003320010032...

Allianz Maroc

Breach

4/2024

ALL841080425

Allianz Maroc

Ransomware

100

01/2023

ALL435050724

Loading…

A.I.

Allianz Maroc Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Allianz Maroc

Incidents vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Maroc in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Allianz Maroc in 2026.

Incident Types Allianz Maroc vs Insurance Industry Avg (This Year)

No incidents recorded for Allianz Maroc in 2026.

Incident History - Allianz Maroc (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Allianz Maroc Subsidiaries

Allianz Maroc

Insurance

Website: https://www.allianz.ma

Company Size: 476

107

AllianzFinancial Services

Allianz PartnersInsurance

Allianz Partners FranceInsurance

Allianz Partners BrasilSeguros e previdência complementar

Allianz Partners EspañaSeguros

Allianz Partners TürkiyeConsumer Services

Allianz Partners AustraliaInsurance

Allianz Partners IndiaInsurance

Allianz Partners UK and IrelandInsurance

Allianz Global Assistance CanadaInsurance

Allianz Partners MéxicoSeguros

Allianz Partners NederlandInsurance

Allianz Partners USAInsurance

Allianz Partners BelgiumInsurance

Allianz Partners PortugalSeguros e previdência complementar

Allianz Partners APACInsurance

Allianz Partners DeutschlandVersicherungswesen

Allianz Partners ItalyAssicurazioni

Allianz Partners RéunionBusiness Consulting and Services

Allianz Partners ColombiaAdministrative and Support Services

Allianz Partners New ZealandInsurance

Allianz Partners MalaysiaFinancial Services

Allianz Partners SwitzerlandVersicherungswesen

Allianz Partners Nordic & BalticsInsurance

Allianz Partners Japan金融サービス

Bajaj Allianz General InsuranceInsurance

PIMCOInvestment Management

Allianz TechnologyIT Services and IT Consulting

Allianz BrasilInsurance

Allianz FranceInsurance

Allianz Protection JuridiqueInsurance

Allianz Global InvestorsFinancial Services

Allianz Global Investors ItaliaServizi finanziari

ACP | Allianz Capital PartnersInvestment Management

Allianz Global Investors DACHFinancial Services

アリアンツ・グローバル・インベスターズ・ジャパン金融サービス

risklab - the Investment and Risk Advisory Experts of Allianz Global InvestorsFinancial Services

Allianz Global Investors FranceServices financiers

Allianz Global Investors EspañaFinancial Services

Allianz TürkiyeInsurance

Allianz ServicesFinancial Services

Allianz Services IndiaFinancial Services

Allianz ConsultingBusiness Consulting and Services

Allianz TradeInsurance

Allianz LifeInsurance

Allianz ColombiaInsurance

Allianz EgyptInsurance

Allianz EspañaInsurance

BBVA Allianz SegurosInsurance

Mutakamela InsuranceInsurance

Allianz Partners, HealthInsurance

Allianz AustraliaInsurance

Allianz Broker AustraliaInsurance

Allianz Australia Personal InjuryInsurance

Allianz Australia AutomotiveInsurance

Allianz ItaliaInsurance

Allianz MalaysiaInsurance

Allianz ArgentinaInsurance

PIMCO Prime Real EstateReal Estate

Allianz IndonesiaInsurance

Allianz MéxicoInsurance

Allianz DirectInsurance

Allianz XVenture Capital and Private Equity Principals

Allianz Asia PacificInsurance

SNA LebanonInsurance

Allianz in DeutschlandInsurance

Allianz Lebensversicherungs-AGInsurance

Allianz Kunde und Markt GmbHInsurance

Allianz Versicherungs AGInsurance

Allianz Beratungs- und Vertriebs AGInsurance

Allianz Private Krankenversicherungs AGInsurance

Allianz ONE - Business Solutions GmbHInsurance

Allianz SuisseInsurance

ElectriX.swissDienstleistungen für Verbraucher

Allianz Broker AcademyVersicherungswesen

Allianz BelgiumInsurance

Allianz GreeceInsurance

Allianz PortugalInsurance

Allianz Global Digital FactoryVersicherungswesen

Allianz CommercialInsurance

Mutakamela Insuranceالتأمين

Allianz Global BenefitsInsurance

Allianz-Tiriac AsigurariInsurance

Allianz AyudhyaInsurance

Allianz NederlandFinancial Services

Allianz ReinsuranceInsurance

Allianz ÖsterreichInsurance

Allianz IrelandInsurance

metafinanz Informationssysteme GmbHIT Services and IT Consulting

KOLETHE CONSULTING INC.,IT Services and IT Consulting

Allianz Asset ManagementFinancial Services

Kaiser X Labs. A company of AllianzDesign Services

Allianz pojišťovna Česká republikaInsurance

Allianz BulgariaFinancial Services

Allianz - Slovenska poistovna, a.s.Insurance

Allianz Hungária Zrt.Insurance

Darta Saving Life Assurance dacInsurance

Allianz LuxembourgInsurance

Allianz MadagascarInsurance

Allianz Life GhanaInsurance

Allianz Pension PartnersFinancial Services

Allianz Reinsurance America, Inc.Insurance

Allianz Zagreb d.d.Insurance

SulAmérica AutoInsurance

PROJECT M MagazineFinancial Services

SyncierInformation Technology & Services

IDS GmbH – Analysis and Reporting ServicesFinancial Services

Loading…

Allianz Maroc Similar Companies

Nationwide

nationwide.com

Nationwide, a Fortune 100 company based in Columbus, Ohio, is one of the largest and strongest diversified insurance and financial services organizations in the United States. Nationwide is rated A+ by Standard & Poor's. An industry leader in driving customer-focused innovation, Nationwide provides a full range of insurance and financial services products including auto, business, homeowners, farm and life insurance; public and private sector retirement plans, annuities and mutual funds; excess & surplus, specialty and surety; and pet, motorcycle and boat insurance. For more information, visit www.nationwide.com.

GNP Seguros

gnp.com.mx

Somos la empresa aseguradora multirramo 100% mexicana de mayor experiencia y solidez de nuestro país. Por más de 116 años hemos protegido a las familias mexicanas, respaldando sus sueños, historias, emociones y vivencias. Estamos orgullosos de formar parte de uno de los conglomerados empresariales más importantes de México GRUPO BAL, el cual está constituido por instituciones de gran prestigio y destacadas en cada uno de sus sectores: seguros, pensiones, financiero, comercial, industrial y educativo. Nuestro compromiso con las familias mexicanas, clientes, colaboradores y fuerza productora va más allá de brindarles protección financiera, buscamos incidir de manera positiva en su vida y la construcción de su futuro y patrimonio. Cada una de nuestras acciones tiene un sentido de responsabilidad social que nos permite contribuir con el desarrollo de México y que forman parte esencial de nuestra filosofía empresarial “Vivir es increíble”, mensaje que nos llena de amor y pasión por la vida y que buscamos transmitir en todo momento. Síguenos en nuestras redes sociales @GNPSEGUROS

Canada Life

canadalife.com

At Canada Life, we’re focused on improving the financial, physical and mental well-being of Canadians. Whether handling policy claims, help growing and protecting clients’ retirement and investment savings, providing workplace mental health support for all employers or helping build stronger communities by investing in community projects, we are committed to putting the customer first in all that we do. That trust is built on the dedication, skill and energy of our employees and advisors and their commitment to our customers and to our communities. Canada Life is a subsidiary of Great-West Lifeco Inc. and is a member of the Power Corporation group of companies.

Aflac

aflac.com

Over 50 Million people worldwide have chosen Aflac because of our commitment to providing customers with the confidence that comes from knowing they have assistance in being prepared for whatever life may bring. With Aflac, whether you're a large business or a small one, you can provide your employees with the kind of benefits they’d expect from a bigger company, helping your business stand out from the crowd. Hundreds of thousands of businesses across the United States already make Aflac available to their employees—at no direct cost to their company. Choose from a wide range of products that can help your employees with health events—from accidents, to disability, to cancer, to life insurance. Your employees enjoy benefits from Aflac, all employee-paid. Please check out Aflac.com for more information.

Star Health and Allied Insurance Co. Ltd

cb starhl.in

Star Health & Allied Insurance Co. Ltd. is an Indian health insurance company headquartered in Chennai. They began their operations in 2006 as India's first standalone Health Insurance provider. They offer innovative products in the health, personal accident and overseas & domestic travel insurance. With meticulously crafted insurance policies, Star Health addresses the unique health needs of people. Having covered more than 16.9 crore lives till now, the company is scaling up its services to ensure that all lives are covered under Health Insurance. Star Health is keen on providing timely assistance during emergency times. In that regard, they have a dedicated in-house claim settlement team to settle claims swiftly. They have an excellent track record of settling more than Rs. 4 crores as claim amount every hour. Star Health has been offering cashless treatment facilities in its 14,000+ Network Hospitals spread across the country and ensures the quality of healthcare services to its customers. With lakhs of agents serving the customers and driving the business on a huge scale, Star Health also operates through other channels including digital, brokers, etc., to cater to the needs of all sections of society. Star Health is also leading the bancassurance and has a long-standing partnership with numerous Banks. Star Health places a huge emphasis on customer experience and service. They have 24x7 multilingual call centre support and dedicated claims assistance. They also offer free Telehealth consultations with their expert team of in-house doctors, along with a free second medical opinion if necessary. In this digitally driven world, Star Health has adapted to the current trend by digitally transforming itself with innovative technologies to guarantee the quality of service, ease of access and seamless user experience for all its customers. Currently, Star Health has 14,000+ employees, 800+ branch offices and 5.8 Lakh agents all over India.

Travelers

travelers.com

Travelers provides insurance coverage to protect the things that are important to you – your home, your car, your valuables and your business. We have been around for more than 170 years and have earned a reputation as one of the best property casualty insurers in the industry because we take care of our customers, agents, brokers, communities and each other. Every day, our approximately 30,000 employees and 13,500 independent agents and brokers in the United States, Canada, the United Kingdom and Ireland help provide peace of mind to our customers. Our expertise and focus on innovation have made us an industry leader and the only property casualty company in the Dow Jones Industrial Average. Our history of advancements has propelled our company, and our industry, to deliver higher standards – from writing the first auto and space travel policies to founding the Travelers Institute for public policy and launching a hybrid car discount. By minimizing risk, preventing loss and helping our customers prepare for the unknown, Travelers’ comprehensive products and services enable individuals and businesses to feel confident and secure about the future. Please see our Social Media Guidelines: www.travelers.com/about-travelers/social-media/guidelines.

TATA AIG General Insurance Company Limited

tataaig.com

At TATA AIG General Insurance, we wear our achievements like a badge of honour – proudly and with gratitude! We have been recognized as one of India’s Top 100 Best Companies to Work For and among the Top 25 Best Workplaces in BFSI in 2024. As a joint venture between the TATA Group and American International Group (AIG), we bring together the best of both worlds, driving innovation and setting new standards in the insurance industry, while staying true to our core values of empathy, people, and customer-first that translates into: #WithYouAlways and #WithYouLikeFamily. This means we’re committed not only to our customers but also to our employees, peers, and partners — ensuring the highest level of dedication, care, and trust. Join us on this incredible journey as we continue to lead, innovate, and redefine the future of insurance. Together, we’re not just setting the standard — we’re building lasting relationships, one person at a time.

AIA

cb aia.com

AIA Group Limited and its subsidiaries (collectively “AIA” or the “Group”) comprise the largest independent publicly listed pan-Asian life insurance group. It has a presence in 18 markets – wholly-owned branches and subsidiaries in Mainland China, Hong Kong SAR(1), Thailand, Singapore, Malaysia, Australia, Cambodia, Indonesia, Myanmar, New Zealand, the Philippines, South Korea, Sri Lanka, Taiwan (China), Vietnam, Brunei and Macau SAR(2), and a 49 per cent joint venture in India. In addition, AIA has a 24.99 per cent shareholding in China Post Life Insurance Co., Ltd. The business that is now AIA was first established in Shanghai more than a century ago in 1919. It is a market leader in Asia (ex-Japan) based on life insurance premiums and holds leading positions across the majority of its markets. It had total assets of US$328 billion as of 30 June 2025. AIA meets the long-term savings and protection needs of individuals by offering a range of products and services including life insurance, accident and health insurance and savings plans. The Group also provides employee benefits, credit life and pension services to corporate clients. Through an extensive network of agents, partners and employees across Asia, AIA serves the holders of more than 43 million individual policies and over 16 million participating members of group insurance schemes. AIA Group Limited is listed on the Main Board of The Stock Exchange of Hong Kong Limited under the stock codes “1299” for HKD counter and “81299” for RMB counter with American Depositary Receipts (Level 1) traded on the over-the-counter market under the ticker symbol “AAGIY”. (1) Hong Kong SAR refers to the Hong Kong Special Administrative Region. (2) Macau SAR refers to the Macau Special Administrative Region.

Gallagher

cb linktr.ee

Gallagher, a global insurance brokerage, risk management, and consulting firm, serves communities around the globe, helping clients address risk, protecting assets, and recovering from losses. The products and services we provide keep businesses and institutions running, and enable individuals and families to face their future with confidence. Gallagher provides retail and wholesale property and casualty brokerage, alternative risk transfer services, employee benefit consulting, and actuarial services. Gallagher also offers claims and information management, risk control consulting and appraisal services, human resource consulting, and retirement services. Follow us on social: Instagram: http://instagram.com/gallagherglobal Facebook: http://www.facebook.com/GallagherGlobal Twitter: https://twitter.com/GallagherGlobal YouTube: https://www.youtube.com/GallagherGlobal

Loading…

NEWS

Allianz Maroc CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 24, 2023 06:21 AM

Allianz Risk Barometer

The most important corporate concerns for the year ahead, as ranked by 3338 risk management experts from 97 countries and territories ➤ Learn more.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…