Mattermost Desktop App Access Control Error Vulnerability

Mattermost Desktop App is a messaging desktop application from Mattermost USA. An Access Control Error vulnerability exists in Mattermost Desktop App versions prior to 4.4.0, which stems from the program's failure to properly handle the same-origin policy and can be exploited by an attacker to...

Mattermost Server Access Control Error Vulnerability (CNVD-2020-35183)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. An Access Control Error vulnerability exists in Mattermost Server version 5.18.0, which arises from a network system or product that does not properly restrict access to resources from unauthorized...

Cisco IOS XR Access Control Error Vulnerability (CNVD-2020-34297)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. An access control error vulnerability exists in the ACL function of the alternate route processor management interface in Cisco IOS XR Software. A remote attacker could exploit this...

Cisco Smart Software Manager On-Prem Access Control Error Vulnerability

Cisco Smart Software Manager On-Prem SSM On-Prem is a Cisco component for Cisco product license management. An Access Control Error vulnerability exists in web applications in versions prior to Cisco SSM On-Prem Release 8-202004, which stems from a lack of authorization controls. A remote attacke...

Treck TCP/IP Stack Access Control Error Vulnerability

Treck TCP/IP is a suite of TCP Transmission Control Protocol/IP Internet Interconnection Protocol from Treck, Inc. dedicated to embedded systems. An access control error vulnerability exists in the Treck TCP/IP stack. The vulnerability arises from a network system or product that does not properl...

Cisco Application Services Engine Access Control Error Vulnerability

Cisco Application Services Engine is the United States Cisco Cisco company's set of common platform for the deployment of Cisco data center applications. The keystore in Cisco Application Services Engine versions prior to 1.1.2.20 is vulnerable to an Access Control Error vulnerability that stems...

Cisco Catalyst 2960-L Series Switches and CDB-8P Switches Access Control Error Vulnerability

The Cisco Catalyst 2960-L Series Switches and the Cisco Catalyst CDB-8P Switches are both products of Cisco, Inc.The Cisco Catalyst 2960-L Series Switches is a 2960-L series switch. Cisco Catalyst CDB-8P Switches is a digital building series switch. An access control error vulnerability exists in...

Cisco Application Services Engine Access Control Error Vulnerability (CNVD-2020-32907)

Cisco Application Services Engine is the United States Cisco Cisco company's set of common platform for the deployment of Cisco data center applications. An access control error vulnerability exists in the API in Cisco Application Services Engine versions prior to 1.1.2.20, which stems from a...

SWARCO CPU LS4000 G4 Access Control Error Vulnerability

SWARCO CPU LS4000 G4 is a set of software used in SWARCO chips from SWARCO Austria. An access control error vulnerability exists in SWARCOs CPU LS4000 G4, which arises from an open port used for debugging that fails network access control and has root access to the device. An attacker could use...

Bosch Recording Station Access Control Error Vulnerability

Bosch Recording Station is a surveillance video management solution from Bosch, Germany. An Access Control Error vulnerability exists in the Kiosk Mode feature in Bosch Recording Station, which stems from incorrect access control. A local attacker could use this vulnerability to bypass Kiosk Mode...

Inductive Automation Ignition Access Control Error Vulnerability

Inductive Automation Ignition is a suite of integrated software platforms for SCADA systems from Inductive Automation, Inc. The platform supports SCADA data acquisition and monitoring systems, HMI human machine interface and more. An access control error vulnerability exists in Inductive Automati...

Open Build Service Access Control Error Vulnerability

Open Build Service OBS is a general purpose system for building and distributing software packages from source code in an automated, consistent and repeatable manner. An Access Control Error vulnerability exists in OBS versions prior to 2.10.5. A remote attacker could exploit this vulnerability t...

Kata Containers Access Control Error Vulnerability

Kata Containers is an open source lightweight virtual machine builder from the Kata Containers community. An Access Control Error vulnerability exists in Kata Containers versions prior to 1.11.0 on Cloud Hypervisor, which can be exploited by an attacker to overwrite an image file and take control...

Access Control Error Vulnerability in Multiple Emerson Electric Products

Emerson Electric Wireless 1410 Gateway and others are a smart wireless gateway product from Emerson Electric USA. The Emerson Electric Wireless 1410 Gateway version 4.6.43 through 4.7.84, the Wireless 1420 Gateway version 4.6.43 through 4.7.84, and the Wireless 1552WU Gateway version 4.6.43 throu...

Opto 22 SoftPAC Project Access Control Error Vulnerability

Opto 22 SoftPAC Project is an automation software suite from Opto 22 USA. The product is capable of providing industrial automation, process control, building automation, remote monitoring, data acquisition and industrial IoT. An Access Control Error vulnerability exists in Opto 22 SoftPAC Projec...

JAL Information Technology PALLET CONTROL Access Control Error Vulnerability

JAL Information Technology PALLET CONTROL is a suite of IT asset management software from JAL Information Technology in Japan. An access control error vulnerability exists in JAL Information Technology PALLET CONTROL version 6.3 and earlier. An attacker can exploit this vulnerability to execute...

Mozilla Thunderbird Access Control Error Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The program supports IMAP, POP mail protocols and HTML mail format. An access control error vulnerability exists in Mozilla Thunderbird versions prior to...

Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27107)

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An Access Control Error vulnerability exists in Cisco Firepower Threat Defense that stems from incorrect configuration. An attacker could exploit th...

Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27106)

Cisco Firepower Threat Defense FTD is a suite of unified software from the U.S. company Cisco Cisco that provides next-generation firewall services. An access control error vulnerability exists in Cisco Firepower Threat Defense. An attacker could exploit the vulnerability by sending specially...

Cisco Firepower Threat Defense Access Control Error Vulnerability (CNVD-2020-27773)

Cisco Firepower Threat Defense FTD is a suite of unified software that provides next-generation firewall services from the U.S. company Cisco Cisco. An access control error vulnerability exists in Cisco FTD versions 6.3.0, 6.4.0, and 6.5.0, which arises from configuring different administrative...