Apache HTTP Server Vulnerabilities Jan 2019 - Apr 2020

Summary Symantec Web Security Group WSG products using affected versions of Apache HTTP Server may be susceptible to multiple vulnerabilities. A remote attacker can bypass security controls, modify the behavior of HTTP Server configuration, obtain information from the server process memory, perfo...

CVE-2020-10136 IP-in-IP protocol allows a remote, unauthenticated attacker to route arbitrary network traffic

IP-in-IP protocol specifies IP Encapsulation within IP standard RFC 2003, STD 1 that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing...

PT-2020-3057 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: The issue is related to the IP-in-IP protocol, which is vulnerable to spoofing and access-control bypass due to the lack of validation for network packets before decapsulation...

Pulseaudio Access Control Bypass Vulnerability

PulseAudio is an open source audio system for POSIX OS. The system is primarily used for audio transmission, among other things. A security vulnerability exists in PulseAudio. An attacker could exploit this vulnerability to bypass access control and record audio...

UBUNTU-CVE-2020-12669

core/getmenudiv.php in Dolibarr before 11.0.4 allows remote authenticated attackers to bypass intended access restrictions via a non-alphanumeric menu parameter...

Joomla Authorization RCE Vulnerability (CNVD-2020-25051)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development of open source , cross-platform content management system CMS. source, cross-platform content management system CMS. An authorized RCE vulnerability exists in Joomla, which can be exploited by attackers to bypass...

CVE-2019-15793

In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into inituserns, whereas they should have been translated in...

CVE-2019-12524

CVE-2019-12524 concerns Squid up to version 4.7 where the Cache Manager block relies on a url_regex rule that decodes incoming requests. An attacker can craft an encoded URL to bypass the url_regex check and access the blocked Cache Manager resource. Affects Squid’s request handling path and deco...

Access Control Bypass

gdm is vulnerable to access control bypass. A flaw was found in the way the gdm package was built. The gdm package was missing TCP wrappers support, which could result in an administrator believing they had access restrictions enabled when they did not...

Access Control Bypass

tog-pegasus is vulnerable to access control bypass. After re-basing to version 2.7.0 of the OpenGroup Pegasus code, these additional security enhancements were no longer being applied. As a consequence, access to OpenPegasus WBEM services was not restricted to the dedicated users as described in...

Access Control Bypass

dovecot is vulnerable to access control bypass. A flaw was found in Dovecot's ACL plug-in. The ACL plug-in treated negative access rights as positive rights, which could allow an attacker to bypass intended access restrictions...

Access Control Bypass

kernel is vulnerable to access control bypass. A missing check for files opened with OAPPEND in the syssplice could allow a local, unprivileged user to bypass the append-only file restrictions...

Zoom Client for Meetings < 4.6.9.19273.0402 Multiple Vulnerabilities (macOS)

The version of Zoom Client for Meetings installed on the remote macOS or Mac OS X host is prior to 4.6.9.19273.0402 and is therefore affected by multiple vulnerabilities. - A privilege escalation vulnerability exists in the Zoom client due to a 'runwithroot' file being placed in a user-writable...

Kentico CMS < 9.0.51 / 10.x < 10.0.48 Access Control Bypass

Kentico CMS is a common ASP.NET Content Management System CMS used for building websites and online stores. Kentico CMS versions before 9.0.51 and 10.0 before 10.0.48 allows remote attackers to gain Global Administrator access by visiting CMSInstall/install.aspx and then browsing the CMS...

Unspecified vulnerability in Apple macOS Catalina autofs component

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the autofs component in Apple macOS Catalina versions prior to 10.15.3. An attacker could exploit the vulnerability to bypass access control...

envoy: TLS inspector bypassc

An access control bypass vulnerability was found in envoy. An attacker could send specially crafted packets over TLS v1.3 to possibly bypass security restrictions...

CVE-2019-14071

Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect secure or non-secure ram dumps in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

CVE-2019-14071

CVE-2019-14071 affects Qualcomm/Snapdragon components where the reset handler can bypass access control if the AC configuration is reset while debug path for RAM dumps is enabled. The issue is described across multiple sources (NVD, Red Hat, PRION, CIRCL) with same core summary, listing affected ...

CVE-2020-8660

An access control bypass vulnerability was found in envoy. An attacker could send specially crafted packets over TLS v1.3 to possibly bypass security restrictions...

CVE-2020-1860

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the...