UBUNTU-CVE-2019-12472

An Incorrect Access Control vulnerability was found in Wikimedia MediaWiki 1.18.0 through 1.32.1. It is possible to bypass the limits on IP range blocks $wgBlockCIDRLimit by using the API. Fixed in 1.32.2, 1.31.2, 1.30.2 and 1.27.6...

python-novajoin: novajoin API lacks access control

A flaw was discovered in the python-novajoin plugin for Red Hat OpenStack Platform. The novajoin API lacked sufficient access control, allowing any keystone authenticated user to generate FreeIPA tokens...

CVE-2019-12926

MailEnable Enterprise Premium 10.23 did not use appropriate access control checks in a number of areas. As a result, it was possible to perform a number of actions, when logged in as a user, that that user should not have had permission to perform. It was also possible to gain access to areas...

The vulnerability of the Akord-Win64 information protection tool, related to access control deficiencies, allows a intruder to bypass additional authentication procedures (personal identification) and enhance their privileges.

The vulnerability of the information protection tool against unauthorized access, Akord-Win64, is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass additional authentication procedures personal identifier. Upon successful authentication...

Django Security Bypass Vulnerability (CNVD-2019-21074)

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A security vulnerability exists in Django that stems from the program's failure to properly handle...

CVE-2018-14868

Incorrect access control in the Password Encryption module in Odoo Community 9.0 and Odoo Enterprise 9.0 allows authenticated users to change the password of other users without knowing their current password via a crafted RPC call...

CVE-2018-14885

Incorrect access control in the database manager component in Odoo Community 10.0 and 11.0 and Odoo Enterprise 10.0 and 11.0 allows a remote attacker to restore a database dump without knowing the super-admin password. An arbitrary password succeeds...

IBM Tivoli Netcool Impact Privilege Permission and Access Control Vulnerability

IBM Tivoli Netcool Impact is a suite of network management software from IBM in the United States. The software has the ability to automate business-critical functions and provide a platform that provides unified access to real-time data, events and indicators. A privileged access and privilege...

The vulnerability of the command-line interface on NX-OS and FX-OS devices of Cisco’s networking operating systems allows attackers to disclose sensitive information.

The vulnerability of the command-line interfaces of NX-OS and FX-OS devices from Cisco involves incomplete verification of role-based access control RBAC. Exploiting this vulnerability allows a malicious actor to disclose sensitive information by executing diagnostic commands with specially craft...

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440 Privilege License and Access Control Issues Vulnerabilities

Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440 are both code reading systems from Siemens, Germany. A privilege-granting and access-control issue vulnerability exists in Siemens SIMATIC Ident MV420 and Siemens SIMATIC Ident MV440, which can be exploited by an attacker to elevate...

VulnCheck KEV: CVE-2019-7238

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of Windows operating system kernels is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

CVE-2019-9548

Citrix Application Delivery Management ADM 12.1.x before 12.1.50.33 has Incorrect Access Control...

Design/Logic Flaw

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

PYSEC-2019-194

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

PYSEC-2019-194

An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitrary image. This meant that a remote attacker could upload a new amphorae image and, if requested t...

The vulnerability of the Interaction Center Intelligence component of the Oracle E-Business Suite automation system allows a perpetrator to access confidential information.

The vulnerability of the Interaction Center Intelligence component of the Oracle E-Business Suite automation system for enterprises is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to confidential...

The vulnerability of the Oracle One-to-One Fulfillment sub-component, the Print Server component of the Oracle E-Business Suite, allows a perpetrator to access confidential information.

The vulnerability of the Oracle One-to-One Fulfillment sub-component, the Print Server, within the Oracle E-Business Suite system for enterprise automation activities is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Error Reporting WER error reporting service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to execute arbitrary code in kernel mode...