9503 matches found
Authorization
Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information...
CVE-2023-44206
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...
CVE-2023-44206
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...
CVE-2023-44206
Acronis Cyber Protect 15 (Linux/Windows) before build 35979 is affected by CVE-2023-44206. The root cause is an error in processing user-controlled authorization keys, allowing a remote attacker to elevate privileges, resulting in sensitive information disclosure and manipulation. The issue is fi...
CVE-2023-44205
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...
CVE-2023-44205
CVE-2023-44205 affects Acronis Cyber Protect 15 for both Linux and Windows, before build 35979 . Root cause is improper authorization leading to sensitive information disclosure . As per NVD, base scores are CVSS v3.1: 5.3 (MEDIUM) and CVSS v3.0 internal metrics from Acronis: 3.5 (LOW) . No explo...
CVE-2023-44154
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...
CVE-2023-44154
CVE-2023-44154 affects Acronis Cyber Protect 15 (Linux and Windows) before build 35979. The issue is due to improper authorization, enabling sensitive information disclosure and manipulation. Documented impact includes disclosure and potential manipulation of data without sufficient privileges. T...
CVE-2023-44154
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...
PT-2023-5776 · Acronis · Acronis Cyber Protect 15 +1
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions before build 35979 Description: The issue is related to sensitive information disclosure and manipulation due to improper authorization. It is caused by an error in processing user-controlled authorization...
PT-2023-5785 · Acronis · Acronis Cyber Protect 15 +1
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions before build 35979 Description: The issue is related to sensitive information disclosure and manipulation due to improper authorization, potentially allowing a remote attacker to elevate their privileges...
CVE-2023-20186: Improper Authorization
A vulnerability in the Authentication, Authorization, and Accounting AAA feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to bypass command authorization and copy files to or from the file system of an affected device using the Secure Copy...
CVE-2023-0456: Improper Authorization
A flaw was found in APICast, when 3Scale's OIDC module does not properly evaluate the response to a mismatched token from a separate realm. This could allow a separate realm to be accessible to an attacker, permitting access to unauthorized information...
CVE-2023-44123: Improper Authorization
The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAGMUTABLE set that leads to theft and/or over-write of arbitrary files with system privilege in the Bluetooth "com.lge.bluetoothsetting" app. The attacker's app, if it had access to app notifications, could intercept...
CVE-2023-44125: Improper Authorization
The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAGIMMUTABLE set that leads to theft and/or over-write of arbitrary files with system privilege in the Personalized service "com.lge.abba" app. The attacker's app, if it had access to app notifications, could...
Acronis Cyber Protect Security Vulnerability
Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security vulnerabili...
PT-2023-5777
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions before build 35979 Description The issue is related to sensitive information disclosure due to improper authorization. It is caused by an error in processing user-controlled authorization keys, which can allow...
Acronis Cyber Protect Security Vulnerability
Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, cybersecurity and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security vulnerabili...
