CVE-2024-22343

CVE-2024-22343 affects IBM TXSeries for Multiplatforms 8.2. The issue in the Administration Console allows web pages to be stored locally and read by another user on the same system. IBM X-Force ID: 280190; CVSS base score in IBM bulletin listed as 4.0. Affected product/version: IBM TXSeries for ...

Authorization Bypass

@oneuptime/common-server and @oneuptime/model are vulnerable to Authorization Bypass Through User-Controlled Key. The vulnerability is due to improper validation of the ismasteradmin key stored in the browser local storage. Attackers can manipulate this key from false to true, granting themselves...

GHSA-246P-XMG8-WMCQ OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

Summary A security vulnerability exists in oneuptime's local storage handling, where a regular user can escalate privileges by modifying the ismasteradmin key to true. This allows unauthorized access to administrative functionalities. Details The vulnerability lies in the improper validation of...

OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

Summary A security vulnerability exists in oneuptime's local storage handling, where a regular user can escalate privileges by modifying the ismasteradmin key to true. This allows unauthorized access to administrative functionalities. Details The vulnerability lies in the improper validation of...

CVE-2024-29194

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data within the web application. Specifically, the ismasteradmin key, stored in the local storage of the browser, can be manipulated by an attacker. By...

CVE-2024-29194 OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data within the web application. Specifically, the ismasteradmin key, stored in the local storage of the browser, can be manipulated by an attacker. By...

CVE-2024-29194 OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data within the web application. Specifically, the ismasteradmin key, stored in the local storage of the browser, can be manipulated by an attacker. By...

PT-2024-22798

Name of the Vulnerable Software and Affected Versions OneUptime versions prior to 7.0.1815 Description The issue lies in the improper validation of client-side stored data within the web application. Specifically, the is master admin key, stored in the local storage of the browser, can be...

OneUptime 安全漏洞

OneUptime is a comprehensive solution from OneUptime Open Source. for monitoring and managing your online services. A security vulnerability exists in versions prior to OneUptime 7.0.1815 that stems from incorrect authentication of client-stored data in a web application, where privileges can be...

CVE-2024-29194: Authorization Bypass Through User-Controlled Key

OneUptime is a solution for monitoring and managing online services. The vulnerability lies in the improper validation of client-side stored data within the web application. Specifically, the ismasteradmin key, stored in the local storage of the browser, can be manipulated by an attacker. By...

CVE-2023-46181 IBM Secure Proxy information disclosure

IBM Sterling Secure Proxy 6.0.3 and 6.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 269686...

PT-2024-13338

Name of the Vulnerable Software and Affected Versions IBM Sterling Secure Proxy versions 6.0.3 through 6.1.0 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For versions 6.0.3 and 6.1.0, consider implementing acces...

CVE-2023-27545

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947...

CVE-2023-27545

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947...

CVE-2024-25122 Cross-site Scripting sidekiq-unique-jobs UI server vulnerability

sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, bu...

How to Create a Local Storage Repository

This article describes how to create local storage in XenServer...

PT-2023-31173 · Unknown +3 · Budgie Extras Clockworks Applet +3

Name of the Vulnerable Software and Affected Versions: Budgie Extras Clockworks applet affected versions not specified Description: Temporary data passed between application components by the Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a...

PT-2023-29233 · Unknown · Uptime Kuma

Name of the Vulnerable Software and Affected Versions: Uptime Kuma versions prior to 1.23.3 Description: The issue allows attackers with access to a user's device to gain persistent account access due to missing verification of Session Tokens after password changes and/or elapsed inactivity...

DEBIAN-CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

PT-2023-20519 · Sidekiq +1 · Sidekiq +1

Name of the Vulnerable Software and Affected Versions: sidekiq versions prior to 7.1.3 Description: The issue is related to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this by manipulating the localStorage value, causing excessive...