693 matches found
The vulnerability of the update function in FlexConnect microprogramming software for Cisco Aironet Access Points allows a intruder to disclose protected information.
The vulnerability of the update function in FlexConnect microprogramming software for Cisco Aironet Access Points is related to improper handling of permissions. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by sending TFTP requests to the vulnerable...
The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations, related to the improper assignment of permissions for critical resources, allows attackers to gain access to confidential data.
The vulnerability of the TLS module in configuration management systems and remote execution of Salt operations is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows an attacker to gain access to confidential data...
CVE-2021-22311
There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include...
CVE-2021-22311
There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include...
SOYAL 701Server 9.0.1 Insecure Permissions
Summary 701 Server is the program used to set up and configure LAN and IP based access control systems, from the COM port used to the quantity and type of controllers connected. It is also used for programming some of the more complex controllers such as the AR-716E and the AR-829E. Description T...
SOYAL 701Client 9.0.1 Insecure Permissions
Summary 701 Client is the user interface software for the access control system. It is used for adding and deleting tokens, setting door groups for access, setting time zones for limiting access and monitoring ingress and egress on a live system, among other things. Description The application...
CVE-2020-12353
Improper permissions in the IntelR Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable denial of service via network access...
CVE-2020-12330
Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12346
Intel Battery Life Diagnostic Tool pre-1.0.7 contains an elevation of privilege due to improper installer permissions. Local access with authenticated user could escalate privileges. CVSS v3.1 base score 7.8 (HIGH). Affected: Intel Battery Life Diagnostic Tool before version 1.0.7. Mitigation: up...
CVE-2020-12346
Improper permissions in the installer for the IntelR Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12353
The CVE-2020-12353 issue affects Intel Data Center Manager Console prior to 3.6.2. The root cause is improper permissions (privilege misconfig) in the Console, which could allow an authenticated user to enable a denial of service via network access. Impact is a partial availability degradation. R...
CVE-2020-12335
Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12334
CVE-2020-12334 affects Intel(R) Advisor tools prior to 2020 Update 2. The issue is improper permissions in the installer, potentially enabling local privilege escalation for an authenticated user. Intel’s advisory recommends updating to version 2020 Update 2 or later. CVSSv3.1 vector from the adv...
CVE-2020-12334
Improper permissions in the installer for the IntelR Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access...
The vulnerability of the Intel Mailbox Interface driver installer allows attackers to increase their privileges.
The vulnerability of the Intel Mailbox Interface driver installer is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability in the set of development libraries for Intel Distribution of OpenVINO toolkit relates to errors in using standard permissions, allowing a perpetrator to increase their privileges.
The vulnerability in the set of development libraries for Intel Distribution of OpenVINO toolkit is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...
Guild Wars 2 Insecure Folder Permissions
Exploit Title: Guild Wars 2 - Insecure Folder Permissions Date: 2020-10-09 Exploit Author: George Tsimpidas Software Link : https://account.arena.net/welcome Version Build : 106915 Tested on: Microsoft Windows 10 Home 10.0.18362 N/A Build 18362 Category: local Vulnerability Description: Guild War...
CVE-2020-12302
Improper permissions in the IntelR Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access...
InfoCage SiteShell installs their files with improper access permissions
Overview InfoCage SiteShell provided by NEC Corporation installs their files with improper access permissions CWE-732. Especially, the service executable files can be modified by Everyone users. NEC Corporation reported this vulnerability to IPA to notify users of its solution through JVN...