9412 matches found
CVE-2022-0587
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
Authorization
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587 Improper Authorization in librenms/librenms
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2022-0587
Summary: CVE-2022-0587 affects the Librenms project (librenms/librenms) prior to version 22.2.0, due to improper authorization that could allow manipulation of plugins or user-accessible settings. Affected software: LibreNMS repository/librenms (Packagist distribution). Root cause / vulnerability...
CVE-2021-43948
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...
CVE-2021-43948
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...
Authorization
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...
CVE-2021-43948
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...
CVE-2021-43948
Atlassian Jira Service Management Server/Data Center (pre-4.21.0) is affected by CVE-2021-43948 via an Improper Authorization in the Move objects feature. The issue allows authenticated remote attackers to view the names of private objects. Affected versions are before 4.21.0; the fixed version i...
Incorrect Authorization in WildFly Elytron
A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secur...
PT-2022-11948
Name of the Vulnerable Software and Affected Versions Atlassian Jira Service Management Server and Data Center versions prior to 4.21.0 Description The issue allows authenticated remote attackers to view the names of private objects due to an Improper Authorization vulnerability in the "Move...
CVE-2022-0587: Improper Authorization
Improper Authorization in Packagist librenms/librenms prior to 22.2.0...
CVE-2021-43948: Undefined Security Weakness
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...
PT-2022-13282
Name of the Vulnerable Software and Affected Versions librenms/librenms versions prior to 22.2.0 Description The issue is related to improper authorization. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this iss...
Improper Authorization in chocobozzz/peertube
Description The app doesn't check the status of video when making data changes. Normal users can create new comment or reply comment in private videos. Proof of Concept note: I'm using instance p.lu for testing - Step 1: Login as video test1 and upload private video. Get video ID of private video...
Improper Authorization in librenms/librenms
Description LibreNMS v22.1.0 allows users with the normal role/level to interact with the plugin setting resulting in the users could take action such as switching on/off any installed plugins which are supposedly accessible by the Administrator only. Proof of Concept Affected endpoints: 1 GET...
CVE-2022-24002
Improper Authorization vulnerability in Link Sharing prior to version 12.4.00.3 allows attackers to open protected activity via PreconditionActivity...