CVE-2020-12331: Undefined Security Weakness

Improper access controls in Intel UniteR Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-7295 Web Gateway (MWG) - Privilege Escalation vulnerability

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface...

PT-2020-19530

Name of the Vulnerable Software and Affected Versions McAfee Web Gateway versions prior to 9.2.1 Description The issue allows an authenticated user interface user with low permissions to escalate their privileges by changing the system's root password due to improper access controls in the user...

CVE-2020-7295: Improper Authentication

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user to delete or download protected log data via improper access controls in the user interface...

CVE-2020-7293: Improper Authentication

Privilege Escalation vulnerability in McAfee Web Gateway MWG prior to 9.2.1 allows authenticated user interface user with low permissions to change the system's root password via improper access controls in the user interface...

CVE-2020-3360: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated, remote attacker to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management interface of an affected...

PT-2020-2964

Name of the Vulnerable Software and Affected Versions Cisco IP Phones Series 7800 and Series 8800 affected versions not specified Description A vulnerability in the Web Access feature could allow an unauthenticated, remote attacker to view sensitive information on an affected device. This issue i...

CVE-2020-5288

"In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5...

CVE-2020-5293

In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5...

PT-2020-18382

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.7.0.0 through 1.7.6.4 Description The issue is related to improper access controls on the product page, specifically affecting combinations, attachments, and specific prices. Recommendations For PrestaShop versions 1.7.0....

ManageEngine Desktop Central < 10 Build 10.0.515 Information Disclosure

The ManageEngine Desktop Central application running on the remote host is prior to version 10 build 10.0.515. It is, therefore, affected by an information disclosure vulnerability in the PDFGenerationServlet component due to improper access controls. An unauthenticated, remote attacker can explo...

CVE-2020-4203

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956...

CVE-2020-4203: Undefined Security Weakness

IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956...

PT-2020-17916

Name of the Vulnerable Software and Affected Versions IBM DataPower Gateway versions 2018.4.1.0 through 2018.4.1.8 Description The issue could potentially disclose highly sensitive information to a privileged user due to improper access controls. Recommendations For versions 2018.4.1.0 through...

PT-2020-11924

Name of the Vulnerable Software and Affected Versions Zammad versions 3.0 through 3.2 Description An issue in the application allows users to view ticket customer details associated with specific customers due to improper implementation of access controls. This enables users of one company to...

GDPR Cookie Consent < 1.8.3 - Improper Access Controls

Improper Access Controls issue in the clipolicygenerator AJAX call which could allow an authenticated user with low privileges such as a subscriber to: - Change the status of any post/page from published to draft, removing them from the frontend of the blog. - Put a payload in the content of one...

Security Bulletin: Multiple Information disclosure vulnerabilities affect IBM Sterling B2B Integrator (CVE-2017-1302, CVE-2017-1193)

Summary IBM Sterling B2B Integrator Standard Edition could allow a local user to view sensitive information due to improper access controls Vulnerability Details CVEID: CVE-2017-1302 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a local user to view sensitive information d...

Stripo Inc: Able to download any hosted content on AWS S3 bucket(stripo)

An AWS s3 bucket was found, with improper access controls, where all its contents could be downloaded. Steps to reproduce: 1. List contents of the bucket with: aws s3 ls s3://stripo 2. Download the hosted data with : aws s3 sync s3://stripo . Impact Any hosted data can be downloaded to an attacke...

CVE-2019-1622 Cisco Data Center Network Manager Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to retrieve sensitive information from an affected device. The vulnerability is due to improper access controls for certain URLs on affected DCNM softwar...

Cisco Small Business RV320 and RV325 Routers Multiple Vulnerabilities (cisco-sa-20190123-rv-inject, cisco-sa-20190123-rv-info)

According to its self-reported version, this Cisco Small Business RV Series router is affected by multiple vulnerabilities: - A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker wi...