Authorization

Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privileg...

CVE-2018-16947

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller butc process accepts incoming RPCs but does not require or allow for authentication of those RPCs. Handling those RPCs results in operations being performed with administrator credentials, includin...

CVE-2018-4841

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

CVE-2018-4841

A vulnerability has been identified in TIM 1531 IRC All versions V1.1. A remote attacker with network access to port 80/tcp or port 443/tcp could perform administrative operations on the device without prior authentication. Successful exploitation could allow to cause a denial-of-service, or read...

CVE-2018-4836

A vulnerability has been identified in TeleControl Server Basic V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

Design/Logic Flaw

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

CVE-2017-9944

CVE-2017-9944 affects Siemens 7KT PAC1200 data manager (7KT1260) prior to firmware V2.03. The vulnerability is an authentication bypass via the integrated web server (Port 80/TCP), allowing an unauthenticated remote attacker to perform administrative operations over the network. Impact is high (a...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

Ametys CMS Unauthenticated Password Reset Vulnerability

Ametys CMS is prone to an unauthenticated password reset vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Ametys CMS 4.0.2 - Password Reset

Ametys CMS 4.0.2 - Password Reset Vulnerability Summary The following advisory describes a password reset vulnerability found in Ametys CMS version 4.0.2 Ametys is “a free and open source content management system CMS written in Java. It is based on JSR-170 for content storage, Open Social for...

CVE-2017-9939

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations...

Authentication flaw

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations...

CVE-2017-9939

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations...

CVE-2017-9939

A vulnerability was discovered in Siemens SiPass integrated All versions before V2.70 that could allow an attacker with network access to the SiPass integrated server to bypass the authentication mechanism and perform administrative operations...

Siemens SiPass integrated

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Siemens Equipment: SiPass integrated Vulnerabilities: Improper Authentication, Improper Privilege Management, Channel Accessible by Non-Endpoint, Storing Passwords in a Recoverable Format AFFECTED PRODUCTS Siemens...

Authentication flaw

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via...

CVE-2016-7830

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via...

CVE-2016-6818

SQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows remote attackers to obtain sensitive information, modify data, cause a denial of service data deletion, or launch administrative operations or possibly OS commands via a crafted SQL query. The vendor...