CVE-2022-26309 Cross-Site Request en Bulk operation (User operation)

Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation User operation resulting in elevation of privilege to Administrator group...

CVE-2022-26309

CVE-2022-26309 affects Pandora FMS v7.0NG.759. The Core issue is Cross-Site Request Forgery in the Bulk operation for User actions, allowing elevation of privilege to the Administrator group. Practical impact stated: CSRF enables a user operation to grant admin-level access. Some sources suggest ...

CVE-2022-26309

Pandora FMS v7.0NG.759 allows Cross-Site Request Forgery in Bulk operation User operation resulting in elevation of privilege to Administrator group...

CVE-2021-26309

Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions...

CVE-2021-26309

Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions...

CVE-2021-26309

Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions...

CVE-2021-26309

CVE-2021-26309 is an information-disclosure vulnerability affecting the JetBrains TeamCity IntelliJ plugin prior to 2020.2.2.85899. The root cause is insecure permissions on a local temporary file, enabling an information-disclosure scenario. The Red Hat, NVD, CNVD, and CVE-listed records corrobo...