CVE-2019-3845

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1. A malicious user authenticated to a host registered to Satellite or Capsule can use this fla...

PT-2019-1793 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the LUAFV driver of Windows operating systems, which can be exploited by an attacker to elevate privileges and execute arbitrary code...

Synology Android Moments Privilege Permission and Access Control Issues Vulnerability

Synology Android Moments is an Android-based application from Synology Inc. of Taiwan, China for viewing various documents stored in Synology Drive. A vulnerability exists in the privacy page of Synology Android Moments prior to version 1.2.3-199 due to privilege permission and access control...

The vulnerability of the SAP Fiori Client’s mobile execution environment, related to deficiencies in access control, allows a perpetrator to bypass the authentication system.

The vulnerability of the SAP Fiori Client mobile environment is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass the system’s authentication process remotely...

The vulnerability of the SetWLanRadioSettings() function in the software interface of the D-Link DIR-823G router’s microprogramming system allows a hacker to gain access to protected information.

The vulnerability of the SetWLanRadioSettings function in the software interface of the D-Link DIR-823G router’s microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected...

The vulnerability of the Platform Sample/Silicon Reference component in server hardware from Intel(R) Server Board, Intel(R) Server System, and Intel(R) Compute Module stems from deficiencies in access control. This allows attackers to execute arbitrary code.

The vulnerability of the Platform Sample/Silicon Reference component in server hardware from IntelR Server Board, IntelR Server System, and IntelR Compute Module is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2019-1742

A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information. The vulnerability is due to improper access control to files within the web UI. An attacker could exploit this vulnerability by sending a malicious...

The vulnerability of the 802.1X network operating system implemented in Cisco NX-OS devices allows a intruder to cause a service failure.

The vulnerability of the 802.1X network operating system implemented in Cisco NX-OS devices is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to cause service failures...

The vulnerability of the command-line interface implementation of Cisco NX-OS network operating systems for Cisco Nexus 9000 routers allows a attacker to execute arbitrary commands.

The vulnerability of the command-line interface implementation in Cisco NX-OS network operating systems for Cisco Nexus 9000 series routers is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker to execute arbitrary commands...

The vulnerability of Microsoft Edge browsers, related to vulnerabilities in access control, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control...

CVE-2019-6279

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password...

CVE-2018-18862

BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admin+View/, and AR+System+Administration%3A+Server+Information/Default+Admin+Vie...

The installation program of the Intel Parallel Studio XE for Windows toolset is vulnerable, allowing attackers to exploit their privileges.

The vulnerability of the Intel Parallel Studio XE for Windows toolset installation program is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Exchange Server, related to access control deficiencies, allows a perpetrator to gain access to protected information or modify file access rights.

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to protected information or modify file access rights...

CVE-2018-1899

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528...

The vulnerability of the Foundation UI & Servlets component of the Hyperion BI+ event service allows a perpetrator to gain read access to data, modify data, or cause a partial service failure.

The vulnerability of the Foundation UI & Servlets component of the Hyperion BI+ service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, add, or delete access to data, or cause a partial service outage through HTTP...

The vulnerability of the WebCenter Spaces Application component of the Oracle WebCenter Portal web platform, which allows a intruder to gain unauthorized access to data.

The vulnerability of the WebCenter Spaces Application component of the Oracle WebCenter Portal is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data using the HTTP protocol...

Vulnerability of the Application Container component – The JavaEE application server Oracle WebLogic Server, which allows attackers to gain unauthorized access to protected data

The vulnerability of the Application Container component – the JavaEE application server Oracle WebLogic Server – is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the HTTP...

The vulnerability of the Integration Broker component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a perpetrator to gain unauthorized access to data.

The vulnerability of the Integration Broker component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to data using the HTTP...