CVE-2021-25507

CVE-2021-25507 describes an improper authorization vulnerability in the Samsung Flow mobile app before version 4.8.03.5. The issue enables a Samsung Flow PC application connected to the user device to access part of notification data housed in Secure Folder without authorization. The available re...

PT-2021-16697

Name of the Vulnerable Software and Affected Versions Samsung Flow versions prior to 4.8.03.5 Description The issue concerns an improper authorization vulnerability. It allows a Samsung Flow PC application connected to a user's device to access part of the notification data in the Secure Folder...

CVE-2021-25507: Improper Authorization

Improper authorization vulnerability in Samsung Flow mobile application prior to 4.8.03.5 allows Samsung Flow PC application connected with user device to access part of notification data in Secure Folder without authorization...

CVE-2021-36183

An improper authorization vulnerability CWE-285 in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for Forticlient updates...

CVE-2021-36183

CVE-2021-36183 affects FortiClient for Windows (versions 7.0.1 and below, and 6.4.2 and below). The issue is an improper authorization (CWE-285) that may allow a local unprivileged attacker to escalate privileges to SYSTEM through the FortiClient update named pipe. The connected sources provide t...

CVE-2021-25973 Publify - Improper Authorization Leads to Guest Signup Restriction Bypass

In Publify, 9.0.0.pre1 to 9.2.4 are vulnerable to Improper Access Control. “guest” role users can self-register even when the admin does not allow. This happens due to front-end restriction only...

PT-2021-7241

Name of the Vulnerable Software and Affected Versions Cisco AppDynamics Controller Software affected versions not specified Description A vulnerability in the web-based management interface of Cisco AppDynamics Controller Software could allow an unauthenticated, remote attacker to access a...

The vulnerability of the Content Security Policy implementation in Google Chrome’s web browser, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability of the Content Security Policy mechanism in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

The vulnerability of the PopupBlocker component in the Google Chrome web browser, related to improper authorization, allows a hacker to compromise data integrity.

The vulnerability of the PopupBlocker component in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially created iframe...

CVE-2021-41313

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....

CVE-2021-41313

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....

Authorization

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....

CVE-2021-41313

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....

CVE-2021-41313

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....

CVE-2021-41313

CVE-2021-41313 affects Atlassian Jira Server and Data Center prior to 8.20.7. Affected component: the /secure/admin/ConfigureBatching!default.jspa endpoint, where an Improper Authorization issue allows authenticated but non-admin remote attackers to edit email batch configurations. Impact, as des...

PT-2021-23268 · Atlassian · Jira

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.20.7 Description: The issue allows authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the...

CVE-2021-39341: Improper Authorization

The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the loggedinorhasapikey function in the /OMAPI/RestApi.php file that can used to exploit inject malicious web scripts on sites with...

CVE-2021-41313: Improper Authorization

Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....

The vulnerability in the Redmine project and task management web application, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability in the Redmine project and task management web application relates to the bypassing of allowed file extension restrictions for uploaded attachments. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

The vulnerability of the incoming email processor in Redmine’s project and task management web application, related to improper authorization, allows a hacker to compromise data integrity.

The vulnerability of the incoming email processor in Redmine’s project and task management web application relates to the bypassing of the addissuenotes permission restrictions. Exploiting this vulnerability could allow a malicious actor to influence the integrity of data...