USN-4623-1: Pacemaker vulnerability

Ken Gaillot discovered that Pacemaker incorrectly handled IPC communications permissions. A local attacker could possibly use this issue to bypass ACL restrictions and execute arbitrary code as root...

Privilege Escalation

cyrus-imapd is vulnerable to privilege escalation. It is possible in component created mailboxes with administrator privileges if the "fileinto" was used, bypassing ACL checks...

Moderate: cyrus-imapd security update

The cyrus-imapd packages contain a high-performance mail server with IMAP, POP3, NNTP, and SIEVE support. Security Fixes: cyrus-imapd: privilege escalation in HTTP request CVE-2019-18928 cyrus-imapd: lmtpd component created mailboxes with administrator privileges if the "fileinto" was used,...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2020-2303)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have...

CVE-2020-25654

An ACL bypass flaw was found in Pacemaker. This flaw allows an attacker with a local account on the cluster and in the haclient group to use IPC communication with various daemons to directly perform certain tasks that would be prevented if they had gone through configured ACLs. The highest threa...

CVE-2020-25654

An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration...

[20210307] - Core - ACL violation within com_content frontend editing

Incorrect ACL checks could allow unauthorized change of the category for an article...

PT-2020-22907

Уязвимость шаблона phpgacl/acl admin.tpl PHP-библиотеки для управления доступом в веб-приложениях phpGACL системы для ведения медицинской документации OpenEMR связана с непринятием мер по защите структуры веб-страницы при обработке параметра шаблона action. Эксплуатация уязвимости может позволить...

PT-2021-9638

Name of the Vulnerable Software and Affected Versions phpGACL version 3.3.7 Description A cross-site scripting issue exists in the template functionality. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this issue in th...

Chocolatey Boxstarter is vulnerable to privilege escalation due to weak ACLs

Overview Chocolatey Boxstarter fails to properly set ACLs, which can allow an unprivileged Windows user to be able to run arbitrary code with SYSTEM privileges. Description CVE-2020-15264 The Chocolatey Boxstarter installer fails to set a secure access-control list ACL on the...

CVE-2020-10140

Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unprivileged user can achieve arbitrary code execution with SYSTEM privileges by placing a DLL in one of several paths...

Code injection

Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unprivileged user can achieve arbitrary code execution with SYSTEM privileges by placing a DLL in one of several paths...

CVE-2020-10140

CVE-2020-10140 affects Acronis True Image 2021, where ACLs for C:\ProgramData\Acronis are not set correctly. This allows an unprivileged user to achieve arbitrary code execution with SYSTEM privileges by placing a DLL in several paths under C:\ProgramData\Acronis, because some privileged processe...

PT-2020-11952

Name of the Vulnerable Software and Affected Versions Acronis True Image version 2021 Description The issue arises from improper ACL settings of the C:ProgramDataAcronis directory by Acronis True Image 2021. This allows an unprivileged user to execute arbitrary code with SYSTEM privileges by...

Cisco IOS XE Software RESTCONF NETCONF YANG Access Control List DoS (cisco-sa-confacl-HbPtfSuO)

According to its self-reported version, IOS-XE is affected by a denial of service DoS vulnerability in the RESTCONF and NETCONF-YANG access control list ACL function. An unauthenticated, remote attacker can exploit this, by accessing the device using RESTCONF or NETCONF-YANG to cause the device t...

CVE-2020-8349

An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System CNOS’ optional REST API management interface. This interface is disabled by default and not vulnerable unless enabled. When enabled, it is only vulnerable where...

Remote code execution

An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System CNOS’ optional REST API management interface. This interface is disabled by default and not vulnerable unless enabled. When enabled, it is only vulnerable where...

CVE-2020-8349

CVE-2020-8349 affects Cloud Networking Operating System (CNOS) via the optional REST API management interface. The vulnerability is unauthenticated remote code execution that is not present when the REST API interface is disabled; if enabled, access is limited to the VRF and governed by ACLs. Imp...

Privilege Escalation

sopelpluginschannelmgnt is vulnerable to privilege escalation. Lack of checking access on restricted changes allows an attacker to bypass ACL and to op/voice, taking over a channel...

PT-2020-20116

Name of the Vulnerable Software and Affected Versions Cloud Networking Operating System CNOS affected versions not specified Description An unauthenticated remote code execution issue has been identified in the optional REST API management interface of Cloud Networking Operating System CNOS. This...