9444 matches found
PT-2020-11456
Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to an improper authorization in the receiver component of Email. This affects the Android operating system, specifically the Android SoC. Recommendations For Android...
CVE-2020-10620: Improper Authorization
Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely...
PT-2020-11431
Name of the Vulnerable Software and Affected Versions Android versions Android SoC Description The issue is related to an improper authorization in the receiver component of the Android Suite Daemon. Recommendations For Android versions Android SoC, update to a version that includes the fix for t...
CVE-2020-0065: Undefined Security Weakness
An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448...
CVE-2020-0090: Undefined Security Weakness
An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048...
CVE-2020-12875: Incorrect Authorization
Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating specific parameters within the application...
CVE-2020-1998
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...
CVE-2020-1998
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...
Authorization
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...
CVE-2020-1998 PAN-OS: Improper SAML SSO authorization of shared local users
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...
CVE-2020-1998
CVE-2020-1998 describes an improper authorization vulnerability in PAN-OS where the system incorrectly applies local Linux user permissions instead of the intended SAML permissions when the username is shared for SSO. Affected are PAN-OS versions: 7.1.x before 7.1.26; 8.0.x before 8.1.13; 8.1.x b...
CVE-2020-1998: Improper Authorization
An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...
PT-2020-15221
Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 7.1.26 PAN-OS versions prior to 8.0.21 PAN-OS versions prior to 8.1.13 PAN-OS versions prior to 9.0.6 PAN-OS versions prior to 9.1.1 Description An improper authorization issue in PAN-OS mistakenly uses the permissions...
The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper authorization, allows a perpetrator to access confidential data and also trigger a service failure.
The vulnerability of the Astra Linux Directory Service Management System ALD is related to an authentication error for local users. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...
SUSE-SU-2020:1210-1 Security update for openldap2
This update for openldap2 fixes the following issues: - CVE-2020-12243: Fixed a denial of service related to recursive filters bsc1170771. - CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights bsc1143194. -...
CVE-2020-10686: Improper Authorization
A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users...
SUSE-SU-2020:14353-1 Security update for openldap2
This update for openldap2 fixes the following issues: - CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights bsc1143194. - CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin...
Cybozu Garoon contains multiple vulnerabilities
Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Authentication bypass in the API used to specify the fields CWE-287 - CVE-2020-5563 Cross-site scripting in the application "E-mail" CWE-79 - CVE-2020-5564 Input validation bypass in the applications...