The vulnerability of the software platform for industrial automation and IoT solutions, Elcomplus SmartICS, is related to inadequate access control mechanisms. This allows a malicious individual to complete any process within the system.

The vulnerability of the software platform for industrial automation and IoT solutions, Elcomplus SmartICS, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to complete any process within the system remotely...

PT-2022-3037 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 14.3 through 14.9.4 GitLab CE/EE versions 14.10 through 14.10.3 GitLab CE/EE versions 15.0 through 15.0.0 Description: An issue has been discovered in GitLab CE/EE, related to inadequate access control. It may be possibl...

PT-2022-3189 · Unknown · Open Management Infrastructure

Name of the Vulnerable Software and Affected Versions: Open Management Infrastructure OMI affected versions not specified Description: The issue is related to an Elevation of Privilege Vulnerability in Open Management Infrastructure OMI, which is associated with inadequate access control...

PT-2021-4426 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel, which is associated with inadequate access control. This vulnerability can be exploited to allo...

PT-2021-6284 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, associated with inadequate access control. Exploitation of this issue may allow an attacker to...

PT-2021-4883 · Unknown · Open Management Infrastructure

Name of the Vulnerable Software and Affected Versions: Open Management Infrastructure OMI affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Open Management Infrastructure OMI, which is associated with inadequate access control. This...

PT-2021-2779 · Cscape · Cscape

Name of the Vulnerable Software and Affected Versions: Cscape versions prior to 9.90 SP4 Description: The issue is related to inadequate access control in the Cscape software. Exploitation of this issue may allow an attacker to elevate their privileges. The software is configured by default to be...

PT-2021-2704 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the NTFS file system in Windows operating systems and is associated with inadequate access control. It allows an attacker to potentially elevate their privileges...

The vulnerability of the WebReports server report processing system, related to inadequate access control mechanisms, allows attackers to escalate their privileges.

The vulnerability of the WebReports report server is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to increase their privileges...

PT-2020-5011 · Adobe · Acrobat Reader For Android

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader for Android version 20.6.2 and earlier Description: The issue is related to inadequate access control, which could result in the disclosure of sensitive information stored in databases used by the application. Exploitatio...

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, related to inadequate access control mechanisms, allows an intruder to gain access to certain confidential data within CloudForms.

The vulnerability of the CloudForms Management Engine, a software platform for managing virtual environments, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to certain confidential data within CloudForms...

PT-2020-3466 · Red Hat · Red Hat Satellite

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite 6 Description: The issue is related to inadequate access control in Red Hat Satellite, allowing a privileged attacker to read cache files. These cache credentials could help the attacker gain complete control of the Satellit...

PT-2020-3454

Name of the Vulnerable Software and Affected Versions Java SE versions 7u261, 8u251, 11.0.7, 14.0.1 Java SE Embedded version 8u251 Description The issue is related to the JAXP component and is caused by inadequate access control. It allows an unauthenticated attacker with network access via...

PT-2020-3440 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.20 and prior Description: The issue allows a highly privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the unauthorized ability to...

PT-2020-3329 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.20 and prior Description: The issue is related to the Server: Optimizer component of Oracle MySQL Server and is caused by inadequate access control. It allows a low-privileged attacker with network access via...

PT-2020-2506 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the application policy configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to...

ewoltech.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1148251 Security Researcher Anony2311 Helped patch 2 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting ewoltech.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

PT-2020-1458

Name of the Vulnerable Software and Affected Versions Java SE version 8u231 Description The issue is related to inadequate access control in the JavaFX component of Oracle Java SE, allowing an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...

PT-2020-1535 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 Description: The issue is related to inadequate access control in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with networ...

The vulnerability of the US Federal Specific sub-component of the PeopleSoft Enterprise HCM Human Resources package from Oracle PeopleSoft Products allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the US Federal Specific sub-component of the PeopleSoft Enterprise HCM Human Resources package from Oracle PeopleSoft Products is related to inadequate access control mechanisms. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...