9412 matches found
CVE-2022-1466
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...
CVE-2022-1466
CVE-2022-1466 affects Red Hat Single Sign-On (Keycloak-based) where improper authorization allows an authenticated user to perform actions beyond permissions, specifically adding users to the master realm. Root cause: insufficient authorization checks for master-realm actions. Impact: potential u...
CVE-2022-1466
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...
CVE-2022-1466
Due to improper authorization, Red Hat Single Sign-On is vulnerable to users performing actions that they should not be allowed to perform. It was possible to add users to the master realm even though no respective permission was granted...
Red Hat Single Sign-On 安全漏洞
Red Hat Single Sign-On is an authentication and access control system from the American company Red Hat Red Hat. The tool is responsible for authentication and access control functions for the system, supports most authentication protocols Oauth, OpenId Connect, etc., and can be easily integrated...
PT-2022-13909
Name of the Vulnerable Software and Affected Versions Red Hat Single Sign-On affected versions not specified Description The issue is related to improper authorization, allowing users to perform actions they should not be allowed to. Specifically, it was possible to add users to the master realm...
Improper authorization - receptionist can read all Clinic reports
Description Hi there openemr maintainers, I would like to report an improper authorization vulnerability in your source code. Proof of Concept 1. Install openemr in your system and create an admin account and a receptionist account 2. Log in as receptionist and see that you don't see Reports...
Improper authorization - receptionist can read all secure messaging
Description Hi there openemr maintainers, I would like to report an improper authorization vulnerability in your source code. Proof of Concept 1. Install openemr in your system and create an admin account and a receptionist account 2. Use admin account and create a secure message by go to Portal...
WS-2022-0221
Improper authorization - receptionist can read all secure messaging in openemr/openemr before 700...
Elcomplus SmartPTT SCADA
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor: Elcomplus Equipment: SmartPTT Vulnerabilities: Path Traversal, Unrestricted Upload of File with Dangerous Type, Improper Authorization, Cross-site Scripting 2. RISK EVALUATION Successful exploitation...
CVE-2022-26857
Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions...
GitLab 11.5 < 14.7.7 / 14.8 < 14.8.5 / 14.9 < 14.9.2 (CVE-2022-1148)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to steal a user's...
The vulnerability of Xen hypervisors, related to improper authorization, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Xen hypervisors is related to improper authorization. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
CVE-2022-22565: Improper Authorization of Index Containing Sensitive Information
Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data...
PT-2022-15532
Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 9.0.0 through 9.3.0 Description The issue is related to improper authorization of an index containing sensitive information. An authenticated and privileged user could potentially exploit this, leading to...
PT-2022-13526
Name of the Vulnerable Software and Affected Versions The Salon booking system Free and Pro WordPress plugins versions prior to 7.6.3 Description The issue is related to improper authorization in some endpoints of the plugin, which could allow customers to access all bookings and other customers'...
PT-2022-13525
Name of the Vulnerable Software and Affected Versions The Salon booking system Free and pro WordPress plugins versions prior to 7.6.3 Description The issue allows unauthenticated users to search other's bookings and retrieve sensitive information, including full name, email, and phone number of t...
CVE-2022-28776: Improper Authorization
Improper access control vulnerability in Galaxy Store prior to version 4.5.36.4 allows attacker to install applications from Galaxy Store without user interactions...
GitLab 11.5.x < 14.7.7, 14.8.x < 14.8.5, 14.9.x < 14.9.2 Access Token Reuse Vulnerability
GitLab is prone to an access token reuse vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...
CVE-2022-1148
Improper authorization in GitLab Pages included with GitLab CE/EE affecting all versions from 11.5 prior to 14.7.7, 14.8 prior to 14.8.5, and 14.9 prior to 14.9.2 allowed an attacker to steal a user's access token on an attacker-controlled private GitLab Pages website and reuse that token on the...