Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:45 a.m.6 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.9AI score0.00087EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2024/05/15 6:30 p.m.18 views

Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.9AI score0.00087EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/05/15 6:30 p.m.16 views

GHSA-76V2-48W6-CRXR Bonitasoft Runtime Community edition's contains an insecure direct object references vulnerability

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.5AI score0.00087EPSS
Exploits0References5
NVD
NVD
added 2024/05/15 5:15 p.m.13 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.5CVSS6.6AI score0.00087EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/05/15 12:0 a.m.17 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.8AI score0.00087EPSS
Exploits0References2
CVE
CVE
added 2024/05/15 12:0 a.m.77 views

CVE-2024-28087

The CVE describes an Insecure Direct Object Reference (IDOR) affecting Bonitasoft runtime Community edition. The root cause is the absence of dynamic permissions, whereas dynamic permissions existed only in the Subscription edition and have now been restored in Community edition but are not custo...

6.5CVSS6.8AI score0.00087EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/15 12:0 a.m.3 views

Bonitasoft 安全漏洞

Bonitasoft is an open source BPM software from Bonitasoft. Bonitasoft has a security vulnerability that stems from a lack of dynamic permissions, which leads to an IDOR vulnerability...

6.5CVSS6.4AI score0.00087EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.4 views

PT-2024-22255 · Bonitasoft · Bonitasoft Runtime Community Edition

Name of the Vulnerable Software and Affected Versions: Bonitasoft runtime Community edition affected versions not specified Description: The issue is related to the lack of dynamic permissions in the Community edition of Bonitasoft runtime, which causes an Insecure Direct Object Reference IDOR...

6.5CVSS6.9AI score0.00087EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2024/05/15 12:0 a.m.11 views

CVE-2024-28087

In Bonitasoft runtime Community edition, the lack of dynamic permissions causes IDOR vulnerability. Dynamic permissions existed only in Subscription edition and have now been restored in Community edition, where they are not custmizable...

6.9AI score0.00087EPSS
Exploits0References2
Securelist
Securelist
added 2017/07/31 9:0 a.m.883 views

A new era in mobile banking Trojans

In mid-July 2017, we found a new modification of the well-known mobile banking malware family Svpeng – Trojan-Banker.AndroidOS.Svpeng.ae. In this modification, the cybercriminals have added new functionality: it now also works as a keylogger, stealing entered text through the use of accessibility...

6.7AI score
Exploits0
Rows per page
Query Builder