CVE-2022-22141: Incorrect Permission Assignment for Critical Resource

'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 to R4.03.00, from R5.01.00 to R5.04.20, and from R6.01.00 t...

PT-2022-1487

Name of the Vulnerable Software and Affected Versions CENTUM CS 3000 versions from R3.08.10 to R3.09.00 CENTUM VP versions from R4.01.00 to R4.03.00 CENTUM VP versions from R5.01.00 to R5.04.20 CENTUM VP versions from R6.01.00 to R6.08.00 Exaopc versions from R3.72.00 to R3.79.00 Description The...

Rocket.Chat: Improper ACL in Message Starring

The vulnerability allowed attackers to manipulate the starred attribute of arbitrary messages by providing an unrelated room ID where they had access. The vulnerability existed due to improper access checks when starring messages...

PT-2020-11952

Name of the Vulnerable Software and Affected Versions Acronis True Image version 2021 Description The issue arises from improper ACL settings of the C:ProgramDataAcronis directory by Acronis True Image 2021. This allows an unprivileged user to execute arbitrary code with SYSTEM privileges by...

CVE-2020-8010

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

CVE-2020-8010: Undefined Security Weakness

CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...

KLA10136 OSI vulnerability in DeviceLock

Improper ACL enforcing was found in DeviceLock. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited locally. Original advisories - Exploitation Related products DeviceLock CVE list CVE-2006-4184 warning Solution Update to latest...