PT-2021-5295 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft Visual Studio, allowing an attacker to bypass security restrictions and elevate their privileges...

PT-2021-5042 · Microsoft · Windows Core Shell Si Host Extension Framework For Composable Shell +1

Name of the Vulnerable Software and Affected Versions: Windows Core Shell SI Host Extension Framework for Composable Shell affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Core Shell SI Host Extension Framework for Composable She...

PT-2021-5046 · Microsoft · Windows Feedback Hub +1

Name of the Vulnerable Software and Affected Versions: Windows Feedback Hub affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Feedback Hub component of the Windows operating system. Exploitation of this issue may allow an attacker...

PT-2021-5080 · Unknown · Open Management Infrastructure

Name of the Vulnerable Software and Affected Versions: Open Management Infrastructure OMI versions affected versions not specified Description: The issue is related to insufficient access controls in the Open Management Infrastructure OMI extensions for managing Azure virtual machines, allowing a...

PT-2021-6954 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Win32k component of Microsoft Windows, allowing an attacker to potentially elevate their privileges. This could...

PT-2021-6026 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Exchange Server, which can be exploited by a remote attacker to elevate their privileges. Recommendations...

PT-2021-1569 · Microsoft · Windows Multipoint Management +1

Name of the Vulnerable Software and Affected Versions: Windows Multipoint Management affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Multipoint Management service, which can be exploited to elevate privileges. This could allow a...

PT-2021-1564 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insufficient access controls in the Windows Hyper-V hardware virtualization system, allowing an attacker to potentially elevate their privileges. An...

PT-2020-4607 · Microsoft · Windows Update Medic Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Medic Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Update Medic Service component of the Windows operating system. This can be exploited to allow a...

PT-2020-2495 · Oracle · Oracle Outside In Technology

Name of the Vulnerable Software and Affected Versions: Oracle Outside In Technology versions 8.5.4 Description: The issue is related to insufficient access controls in the Outside In Filters component of Oracle Outside In Technology, a suite of software development kits SDKs. This can be exploite...

CVE-2018-18819

A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 7.3.0.601 and earlier, and 8.0 8.0.0.40 through 8.0 SP2 FP2 8.0.2.202, and MiVoice Business Express versions 7.3 PR3 7.3.1.302 and earlier, and 8.0 8.0.0.40 through 8.0 SP2 FP1 8.0.2.202, could allow creation of...

PT-2019-3598 · Oracle · Oracle Hospitality Res 3700

Name of the Vulnerable Software and Affected Versions: Oracle Hospitality RES 3700 version 5.7 Description: The issue is related to insufficient access controls in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. It allows a remote attacker to gain full control...

PT-2019-2171 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Error Reporting WER affected versions not specified Description: An elevation of privilege issue exists in the way Windows Error Reporting WER handles files. This vulnerability is related to insufficient access restrictions ...

CVE-2018-6501

Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center ArcMC for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls...

CVE-2018-6501

Potential security vulnerability of Insufficient Access Controls has been identified in ArcSight Management Center ArcMC for versions prior to 2.81. This vulnerability could be exploited to allow for insufficient access controls...

CVE-2018-6501

This CVE-2018-6501 affects ArcSight Management Center (ArcMC) prior to version 2.81, with a vulnerability described as Insufficient Access Controls. The connected records confirm the affected product and version range, and that the impact is uncontrolled access due to access-control shortcomings....

Cisco Policy Suite Local Information Disclosure Vulnerability

Cisco Policy Suite is a carrier-grade policy, charging, and subscriber data management solution. A local information disclosure vulnerability exists in the CLI of Cisco Policy Suite. The vulnerability stems from insufficient access control privileges. An attacker can exploit the vulnerability by...

CVE-2017-4952

VMware Xenon 1.x, prior to 1.5.4-CR71, 1.5.77, 1.5.4-CR62, 1.3.7-CR12, 1.1.0-CR0-3, 1.1.0-CR31,1.4.2-CR41, and 1.5.48, contains an authentication bypass vulnerability due to insufficient access controls for utility endpoints. Successful exploitation of this issue may result in information...

WowWee Rovio Insufficient Access Controls

SUMMARY WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible OVERVIEW Rovio from WowWee does not adequately secure all accessible URLs or media streams, enabling an unauthorized user with network access to the robotic webcam platform the ability to listen to and view...

FloosieTek FTGatePro 1.2 - WebAdmin Interface Information Disclosure

source: https://www.securityfocus.com/bid/8578/info A weakness has been reported in the FTGatePro WebAdmin Interface that could allow an unauthorized user to gain sensitive information. The problem is believed to occur due to insufficient access controls put in place by FTGatePro. As a result, an...