Improper Authorization

gitlab is vulnerable to Improper Authorization. This allows a malicious user in a private project to view tag data on release pages due to improper authorization checks within gitlab...

Dell Wyse Management Suite < 4.1 Multiple Vulnerabilities (DSA-2023-240)

The version of Dell Wyse Management Suite installed on the remote host is prior to 4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2023-240 advisory. - Wyse Management Suite versions prior to 4.1 contain a denial-of-service vulnerability. An authenticated...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow, related to improper authorization, allows a perpetrator to disclose protected information.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to improper authorization. Exploiting this vulnerability allows a malicious actor, operating remotely, to expose sensitive information through a specially created URL...

CVE-2023-3345: Undefined Security Weakness

The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students...

CVE-2023-3957: Improper Authorization

The ACF Photo Gallery Field plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient restriction on the 'apgprofileupdate' function in versions up to, and including, 1.9. This makes it possible for authenticated attackers, with subscriber-level permissions or...

Improper authorization on debug and artifact file downloads

Impact An authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the organization or have permissions on the project. Patches A patch was issued to ensure authorization checks are proper...

CVE-2023-36826: Improper Authorization

Sentry is an error tracking and performance monitoring platform. Starting in version 8.21.0 and prior to version 23.5.2, an authenticated user can download a debug or artifact bundle from arbitrary organizations and projects with a known bundle ID. The user does not need to be a member of the...

The vulnerability of the SSPanel-Uim software interface allows a perpetrator to access confidential information.

The vulnerability of the SSPanel-Uim software interface is related to improper authorization. Exploiting this vulnerability can allow attackers to access confidential information...

CVE-2023-23568: Improper Authorization

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. This issue affects Command Centre: vEL 8.90 prior to vEL8.90.1318 MR1, vEL8.80 prior to vEL8.80.1192 MR2, vEL8.70 prior to vEL8.70.2185 MR4, vEL8.60 prior to...

CVE-2023-25074: Improper Authorization

Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Competencies. This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 MR1, vEL8.80 prior to vEL8.80.1192 MR2, vEL8.70 prior to vEL8.70.2185 MR4, vEL8.60 prior to...

CVE-2023-22428: Improper Authorization

Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 MR2, vEL8.70 prior to vEL8.70.2185 MR4, vEL8.60 prior to vEL8.60.2347 MR6, vEL8.50 prior to vEL8.50.2831MR8, vEL8.40 a...

Information Disclosure

org.jenkins-ci.plugins:dimensionsscm is vulnerable to Information Disclosure. A remote authenticated attacker with Item/Configure permission is able to gain access to confidential user credentials due to improper authorization checks, resulting in the disclosure of sensitive information...

CVE-2023-3805

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

CVE-2023-3805 Xiamen Four Letter Video Surveillance Management System Login UserInfoAction.class improper authorization

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

CVE-2023-3805

CVE-2023-3805 affects Xiamen Four Letter Video Surveillance Management System (up to 20230712). The vulnerability is in the Login component, specifically the UserInfoAction.class library, causing improper authorization. It allows remote exploitation and has been disclosed publicly. Several source...

CVE-2023-3805: Improper Authorization

A vulnerability, which was classified as critical, has been found in Xiamen Four Letter Video Surveillance Management System up to 20230712. This issue affects some unknown processing in the library UserInfoAction.class of the component Login. The manipulation leads to improper authorization. The...

PT-2023-26266 · Unknown · Xiamen Four Letter Video Surveillance Management System

Name of the Vulnerable Software and Affected Versions: Xiamen Four Letter Video Surveillance Management System versions up to 20230712 Description: A critical issue has been found in the library UserInfoAction.class of the component Login, affecting some unknown processing. This leads to improper...

CVE-2023-32482

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...

CVE-2023-32482

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...

CVE-2023-32482

Wyse Management Suite versions prior to 4.0 contain an improper authorization vulnerability. An authenticated malicious user with privileged access can push policies to unauthorized tenant group...