CVE-2020-8664: Improper Authentication

CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret e.g. trusted CA across many resources together with the combined validation context could lead to the “static” part of the validation context to be not applied, even thoug...

CVE-2020-8660

An access control bypass vulnerability was found in envoy. An attacker could send specially crafted packets over TLS v1.3 to possibly bypass security restrictions...

CVE-2020-1860

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the...

CVE-2020-1860

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the...

CVE-2020-1860

The CVE-2020-1860 entry concerns Huawei Secospace/NIP6800 family devices (NIP6800; Secospace USG6600; USG9500) with firmware lines V500R001C30, V500R001C60SPC500, and V500R005C00SPC100, where an access control bypass vulnerability exists. The root cause allows attackers who can reach the internal...

CVE-2020-1860: Undefined Security Weakness

NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the...

Huawei NIP6800, Secospace USG6600 and USG9500 Access Control Bypass Vulnerability

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. An access control bypass vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which can be...

Security Advisory - Access Control Bypass Vulnerability in Some Huawei Products

There is an access control bypass vulnerability in some Huawei products. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet...

PT-2020-15125

Name of the Vulnerable Software and Affected Versions NIP6800 versions V500R001C30; V500R001C60SPC500; V500R005C00SPC100 Secospace USG6600 versions V500R001C30; V500R001C60SPC500; V500R005C00SPC100 USG9500 products versions V500R001C30; V500R001C60SPC500; V500R005C00SPC100 Description The issue i...

CVE-2019-18988: Weak Password Requirements

TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. It used a shared AES key for all installations since at least as far back as v7.0.43148, and used it for at least OptionsPasswordAES in the...

PT-2020-10342

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.12 Atlassian Jira Server and Data Center versions 8.0.0 through 8.5.4 Atlassian Jira Server and Data Center versions 8.6.0 through 8.6.1 Description The issue allows remote attackers...

LibreOffice 6.2.6 / 6.3.1 Security Control Bypass (Windows)

According to its self-reported version, the LibreOffice application running on the remote host is prior to 6.2.6. It is, therefore, affected by a flaw in how LibreOffice sanitizes user supplied input when decoding URL encoded characters in the macro location. This can result in macros within a...

CVE-2019-4541

IBM Security Directory Server 6.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 165814...

PT-2020-10960

Name of the Vulnerable Software and Affected Versions IBM Security Directory Server version 6.4.0 Description The issue is related to incomplete blacklisting for input validation, allowing attackers to bypass application controls. This results in a direct impact to the system and data integrity...

PT-2020-11001

Name of the Vulnerable Software and Affected Versions IBM Security Secret Server version 10.7 Description The issue is related to incomplete blacklisting for input validation, allowing attackers to bypass application controls. This results in a direct impact to the system and data integrity...

Slack: Remote Code Execution in Slack desktop apps + bonus

Summary With any in-app redirect - logic/open redirect, HTML or javascript injection it's possible to execute arbitrary code within Slack desktop apps. This report demonstrates a specifically crafted exploit consisting of an HTML injection, security control bypass and a RCE Javascript payload. Th...

GitLab CE/EE Access Control Error Vulnerability

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab Community and...

PT-2019-14297

Name of the Vulnerable Software and Affected Versions GitLab versions prior to 12.3.3 Description An issue exists that allows an attacker to bypass access controls and obtain container and dependency scanning reports through the merge request widget, even when public pipelines are disabled...

The vulnerability of the PF IPv6 network firewall in FreeBSD and Solaris systems allows attackers to circumvent existing access control policies or cause service interruptions.

The vulnerability of the PF IPv6 network firewall in FreeBSD and Solaris is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies or cause service failures using a specially crafted IPv6 packet...

CVE-2019-18801

An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1. This may be used to corrupt nearby heap contents leading to a query-of-death scenario or may be used to bypass Envoy's...