CVE-2021-26118

While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in error...

CVE-2021-1272

A vulnerability in the session validation feature of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on a targeted system. This vulnerability is due to insufficient validation of...

CVE-2021-1272: Server-Side Request Forgery (SSRF)

A vulnerability in the session validation feature of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery SSRF attack on a targeted system. This vulnerability is due to insufficient validation of...

Juniper Networks Junos OS EX and Junos OS QFX Security Vulnerabilities

Juniper Networks Junos OS EX and Juniper Networks Junos OS QFX are both switches from Juniper Networks, Inc. A security vulnerability exists in Junos OS EX and Junos OS QFX5K, which can be exploited by an attacker to trigger a denial of service by triggering a fatal error via storm control bypass...

Coturn 4.5.1.x Access Control Bypass Vulnerability

Coturn 4.5.1.x Access Control Bypass Vulnerability Loopback access control bypass in coturn by using 0.0.0.0, ::1 or :: as the peer address - Fixed version: 4.5.2 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-01-coturn-access-control-bypass - Coturn...

Coturn 4.5.1.x Access Control Bypass

Loopback access control bypass in coturn by using 0.0.0.0, ::1 or :: as the peer address - Fixed version: 4.5.2 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-01-coturn-access-control-bypass - Coturn Security Advisory:...

CVE-2020-16043

Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic...

CVE-2020-16043: Undefined Security Weakness

Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic...

CVE-2020-16020: Undefined Security Weakness

Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file...

PT-2021-1539

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.141 Description The issue is related to insufficient data validation in networking, allowing a remote attacker to bypass discretionary access control via malicious network traffic. This could potential...

CVE-2020-29158

An issue was discovered in Zammad before 3.5.1. An Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view...

CVE-2020-29158

CVE-2020-29158 affects Zammad prior to the 3.5.1 release. An agent with Customer permissions within a Group can bypass intended access control to internal Articles through the Ticket detail view, effectively exposing restricted content. The available sources consistently describe an access-contro...

Zammad 安全漏洞

Zammad is a Web-based open source helpdesk/customer support system. An access control bypass vulnerability exists in Zammad versions prior to 3.5.1. An Agent with Customer privileges in a group can exploit this vulnerability to bypass access control to internal Articles via the Ticket detail view...

PT-2020-17102

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 3.5.1 Description An issue was discovered in Zammad where an Agent with Customer permissions in a Group can bypass intended access control on internal Articles via the Ticket detail view. Recommendations For versions...

Information disclosure

An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents PDF by providing a valid document ID and token. No further authentication is required...

PT-2020-17259

Name of the Vulnerable Software and Affected Versions Keysight Database Connector plugin versions prior to 1.5.0 for Confluence Description An issue was discovered in the Keysight Database Connector plugin for Confluence, where a malicious user could bypass access controls for using a saved...

CVE-2020-35122: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could bypass the access controls for using a saved database connection profile to submit arbitrary SQL against a saved database connection...

CVE-2020-35235

vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects product...

CVE-2020-28856: Authentication Bypass by Spoofing

OpenAsset Digital Asset Management DAM through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by supplying localhost address such as 127.0.0.1, effectively bypassing all IP address based access...

PT-2020-17043

Name of the Vulnerable Software and Affected Versions OpenAsset Digital Asset Management DAM versions 12.0.19 and earlier Description The issue allows attackers to spoof the HTTP request's originating IP address by using the X-Forwarded-For header, potentially bypassing IP address-based access...