Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:45 a.m.•21 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.9AI score0.00316EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2024/05/15 6:30 p.m.•43 views

Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.9AI score0.00316EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/05/15 6:30 p.m.•61 views

GHSA-76V2-48W6-CRXR Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.5AI score0.00316EPSS
SaveExploits0References5
NVD
NVD
•added 2024/05/15 5:15 p.m.•48 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.6AI score0.00316EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/05/15 12:00 a.m.•21 views

Bonitasoft 安全漏洞

Bonitasoft is an open source BPM software from Bonitasoft. Bonitasoft has a security vulnerability that stems from a lack of dynamic permissions, which leads to an IDOR vulnerability...

6.5CVSS6.4AI score0.00316EPSS
SaveExploits0References2
Mend
Mend
•added 2024/05/15 12:00 a.m.•1 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.9CVSS0.00316EPSS
SaveExploits0References5
CVE
CVE
•added 2024/05/15 12:00 a.m.•121 views

CVE-2024-28087

The Bonitasoft runtime Community edition (specifically the org.bonitasoft.engine and bonita-server components) is vulnerable to an Insecure Direct Object Reference (IDOR) vulnerability. The root cause is a lack of dynamic permissions in the Community edition, which were previously exclusive to th...

6.5CVSS6.8AI score0.00316EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•22 views

PT-2024-22255 · Bonitasoft · Bonitasoft Runtime Community Edition

Name of the Vulnerable Software and Affected Versions: Bonitasoft runtime Community edition affected versions not specified Description: The issue is related to the lack of dynamic permissions in the Community edition of Bonitasoft runtime, which causes an Insecure Direct Object Reference IDOR...

6.5CVSS6.9AI score0.00316EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2024/05/15 12:00 a.m.•52 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.8AI score0.00316EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/05/15 12:00 a.m.•24 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.9AI score0.00316EPSS
SaveExploits0References2
Securelist
Securelist
•added 2017/07/31 9:00 a.m.•919 views

A new era in mobile banking Trojans

In mid-July 2017, we found a new modification of the well-known mobile banking malware family Svpeng – Trojan-Banker.AndroidOS.Svpeng.ae. In this modification, the cybercriminals have added new functionality: it now also works as a keylogger, stealing entered text through the use of accessibility...

6.7AI score
SaveExploits0
Rows per page
Query Builder