PT-2022-2928 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Microsoft Windows operating system. This can be exploited to elevate privileges. There is no information...

PT-2021-7004

Name of the Vulnerable Software and Affected Versions AVG Anti-Virus Free affected versions not specified AVG Internet Security affected versions not specified AVG Anti-Virus affected versions not specified Description The issue is related to insufficient access control in the aswArPot.sys driver...

PT-2021-5355 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.11 to 3.11.3 Moodle versions 3.10 to 3.10.7 Moodle versions 3.9 to 3.9.10 Moodle versions prior to 3.9 Description: A flaw was found in Moodle due to insufficient capability checks, making it possible to fetch other users'...

PT-2021-8203 · Amd +1 · Amd Μprof +1

Name of the Vulnerable Software and Affected Versions: AMD μProf tool affected versions not specified Description: The AMDPowerProfiler.sys driver of the AMD μProf tool may allow lower privileged users to access MSRs in the kernel, which may lead to privilege escalation and ring-0 code execution ...

PT-2021-5301 · Microsoft · Active Directory Domain Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access control in Active Directory Domain Services, which can be exploited by a remote attacker to elevate their privileges...

PT-2021-5302 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel. It allows an attacker to potentially elevate their privileges. Recommendations: At the...

PT-2021-5085 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to insufficient access control in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations:...

Pentaho Business Analytics / Pentaho Business Server 9.1 Insufficient Access Control

Product: Pentaho Business Analytics / Pentaho Business Server Vendor / Manufacturer: Hitachi Vantara Affected Versions: = 9.1 Vulnerability Type: Insufficient Access Control of Data Source Management Service Solution Status: Fix Released on public GitHub repository Manufacturer Notification: 8th...

PT-2021-4762 · Microsoft · Windows Update Assistant

Name of the Vulnerable Software and Affected Versions: Windows Update Assistant versions affected versions not specified Description: The issue is related to insufficient access control in the Windows Update Assistant, which can be exploited to elevate privileges. Recommendations: At the moment,...

CVE-2021-31384

Due to a Missing Authorization weakness and Insufficient Granularity of Access Control in a specific device configuration, a vulnerability exists in Juniper Networks Junos OS on SRX Series whereby an attacker who attempts to access J-Web administrative interfaces can successfully do so from any...

PT-2021-6329 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Win32k component of the Windows operating system. It allows an attacker to elevate their privileges. Recommendations: At the momen...

PT-2021-6344 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insufficient access control in the Windows Print Spooler, which can be exploited to elevate privileges. This could allow an attacker to affect the...

PT-2021-6315 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Windows operating system kernel, allowing an attacker to elevate their privileges. This can enable an attacker to impact...

PT-2021-22872 · Siemens · Teamcenter

Name of the Vulnerable Software and Affected Versions: Teamcenter versions prior to V12.4.0.8 Teamcenter versions prior to V13.0.0.7 Teamcenter versions prior to V13.1.0.5 Teamcenter versions prior to V13.2.0.2 Description: A vulnerability has been identified that could lead to an account takeove...

GHSA-3C33-3465-FHX2 Exposure of Resource to Wrong Sphere in LibreNMS

An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' = 'admin'" instead of "'middleware' = 'can:admin'" in routes/web.php...

Joomla! 4.x < 4.0.1 Insufficient Access Control

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0 prior to 4.0.1. It is, therefore, affected by an insufficient access control vulnerability on its commedia deletion endpoint. An unauthenticated, remote attacker could exploit this to delete...

Joomla 4.0 < 4.0.1 Insufficient Access Control (5846-joomla-4-0-1)

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0 prior to 4.0.1. It is, therefore, affected by an insufficient access control vulnerability on its commedia deletion endpoint. An unauthenticated, remote attacker could exploit this to delete...

CVE-2021-26040 [20210801] - Core - Insufficient access control for com_media deletion endpoint

An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command...

Vulnerability fixed in Joomla! media manager

Joomla has fixed a vulnerability in the Joomla! media!! manager. Due to improper access control, a user could without being authorized to do so could delete arbitrary content from the media directory. Joomla has released updates to fix the vulnerability in Joomla! 4.0.1. For more information, see...

PT-2021-3916 · Microsoft · Azure Cyclecloud

Name of the Vulnerable Software and Affected Versions: Azure CycleCloud affected versions not specified Description: The issue is related to insufficient access control in Azure CycleCloud, a tool for organizing and managing high-performance computing HPC environments. Exploitation of this issue...