CVE-2020-19586

Incorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI...

CVE-2020-19586

creationtimestamp| type| source ---|---|--- 2022-09-14 14:26:24+00:00| seen| https://t.me/cibsecurity/49759...

CVE-2020-19586

CVE-2020-19586 affects Yellowfin Business Intelligence 7.3, specifically an incorrect access control in the MIAdminStyles.i4 Admin UI that enables remote privilege escalation. The issue is tied to how privileges are enforced in the Admin UI, allowing an attacker to escalate rights. Documented in ...

CVE-2018-19586

Silverpeas 5.15–6.0.2 is affected by an authenticated Directory Traversal vulnerability triggered during file uploads due to core/webapi/upload/FileUploadData.java mishandling a StringUtil.java call. The flaw allows regular users to write arbitrary files on the underlying system with the applicat...