2963 matches found
Huawei FusionCompute 权限许可和访问控制问题漏洞
FusionCompute is Huawei's self-developed computing virtualization software. An elevation of privilege vulnerability exists in FusionCompute 6.3.0, 6.3.1, 6.5.0, 6.5.1, 8.0.0. The vulnerability stems from improper privilege management. An attacker with normal privileges could exploit the...
Privilege escalation
A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime Vijeo XD that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert...
CVE-2020-12495: Improper Privilege Management
Endress+Hauser Ecograph T Neutral/Private Label RSG35, ORSG35 with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. T...
PT-2020-19622
Name of the Vulnerable Software and Affected Versions EcoStruxure Operator Terminal Expert runtime Vijeo XD affected versions not specified Description A CWE-269 Improper Privilege Management issue exists that could cause privilege escalation on the workstation when interacting directly with a...
CVE-2020-16126: Improper Privilege Management
An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to AccountService, thus stopping it from handling D-Bus messages in a timely fashion...
CVE-2020-16122: Improper Privilege Management
PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...
Security Bulletin: Vulnerabilities in Net-SNMP library affect IBM Spectrum Control (CVE-2020-15861, CVE-2020-15862)
Summary Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system Vulnerability Details CVEID: CVE-2020-15861 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of symlinks by...
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-2370)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Multiple vulnerabilities have been identified in IBM Tivoli Netcool/OMNIbus Gateway for SNMP (CVE-2020-15861, CVE-2020-15862)
Summary Netcool/OMNIbus SNMP Gateway is vulnerable to the weaknesses in Net-SNMP library. CVE-2020-15861, CVE-2020-15862 Vulnerability Details CVEID: CVE-2020-15861 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper...
Security Bulletin: Multiple vulnerabilities in Net-SNMP affects Netcool/OMNIbus SNMP Probe (CVE-2020-15861, CVE-2020-15862)
Summary Net-SNMP library is consumed by IBM Tivoli Netcool/OMNIbus SNMP Probe. Information about security vulnerabilities affecting Net-SNMP library has been published. Vulnerability Details CVEID: CVE-2020-15861 DESCRIPTION: Net-SNMP could allow a local authenticated attacker to gain elevated...
EulerOS 2.0 SP2 : net-snmp (EulerOS-SA-2020-2370)
According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following.CVE-2020-15861 - Net-SNMP through 5.7.3...
CVE-2020-27654: Improper Privilege Management
Improper access control vulnerability in lbd in Synology Router Manager SRM before 1.2.4-8081 allows remote attackers to execute arbitrary commands via port 1 7786/tcp or 2 7787/tcp...
PT-2020-20065
Name of the Vulnerable Software and Affected Versions Citrix Gateway Plug-in for Windows versions prior to 13.0-61.49 Citrix Gateway Plug-in for Windows versions prior to 12.1-58.16 Description The issue is related to improper privilege management on services run by the software, which can lead t...
PT-2020-19563
Name of the Vulnerable Software and Affected Versions McAfee Application and Change Control MACC versions prior to 8.3.2 Description The issue allows local administrators to change or update configuration settings via a carefully constructed MSI that mimics the genuine installer. This is due to a...
CVE-2020-7334: Incorrect Privilege Assignment
Improper privilege assignment vulnerability in the installer McAfee Application and Change Control MACC prior to 8.3.2 allows local administrators to change or update the configuration settings via a carefully constructed MSI configured to mimic the genuine installer. This version adds further...
MOXA NPort IAW5000A-I/O Series
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: MOXA Equipment: NPort IAW5000A-I/O Series Vulnerabilities: Session Fixation, Improper Privilege Management, Weak Password Requirements, Cleartext Transmission of Sensitive Information, Improper...
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-2169)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2020-2179)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : net-snmp (EulerOS-SA-2020-2155)
According to the versions of the net-snmp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary...
CVE-2020-25595: Improper Privilege Management
An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back from device hardware registers. While devices strictly compliant with PCI specifications shouldn't ...