CVE-2017-2612

CVE-2017-2612 affects Jenkins platforms prior to 2.44 and prior to 2.32.2. The issue allows low-privilege users to override JDK download credentials, which can lead to builds failing to download a JDK in the future. Root cause is improper permission/credential handling for JDK download. The descr...

PT-2018-7138

Name of the Vulnerable Software and Affected Versions: Jenkins versions prior to 2.44 Jenkins versions prior to 2.32.2 Description: The issue allows low privilege users to override JDK download credentials, which may cause future builds to fail when downloading a JDK. Recommendations: For version...

Receiver | keyboard language set on VDA is over ridden by the one set on the endpoint

User from non domain joined endpoint logs on the VDA Language set on the VDA is overridden by the one set on endpoint machine Receiver. We want to ensure that the keyboard language set on the VDA is the one user gets inside the session. In other words, keyboard language set on the endpoint Receiv...

CVE-2018-1000175

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master...

CVE-2018-1000175: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in Jenkins HTML Publisher Plugin 1.15 and older in HtmlPublisherTarget.java that allows attackers able to configure the HTML Publisher build step to override arbitrary files on the Jenkins master...

Override Access Vulnerability in the Swish Open App

Swish and Drive App is a rental car for traveling. A vulnerability exists in Swish and Drive APP. An attacker can gain access to sensitive information by grabbing packets and modifying IDs...

CVE-2018-1002100

An improper validation flaw exists in the kubernetes 'kubectl cp' command. An attacker, who could trick a user into using the command to copy files locally from a pod, could override files outside of the target directory of the command...

kernel: Buffer overflow in mp_override_legacy_irq()

Buffer overflow in the mpoverridelegacyirq function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 4.12.2 allows local users to gain privileges via a crafted ACPI table...

Override Access Vulnerability in Skyrunner Vulnerability Scanning and Management System v3.3.0

TopScanner, abbreviated as TopScanner, is a vulnerability scanning and management assessment product launched by Beijing Tianrongxin based on years of experience in network security product development, including application detection, vulnerability scanning, vulnerability identification, risk...

Directory override delete vulnerability in Monstra CMS backend filesmanager.admin.php file

Monstra CMS is a lightweight PHP-based content management system CMS developed by Ukrainian software developer Sergey Romanenko. The system is easy to install and use, scalable and so on. A directory override vulnerability exists in the filesmanager.admin.php file in the backend of Monstra CMS. A...

Override access vulnerability in Spike's web version

Nail is a free multi-end platform for communication and collaboration created by Alibaba Group specifically for Chinese enterprises. Nail web version of the existence of bulk user override access vulnerability, an attacker can exploit the vulnerability bulk traversal of hundreds of millions of ui...

CVE-2018-1000107

An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related...

BEESCMS V4.0_R_20160525全局变量覆盖导致前台getshell

...

PT-2018-9286

Name of the Vulnerable Software and Affected Versions: Jenkins Job and Node Ownership Plugin versions 0.11.0 and earlier Description: An improper authorization issue exists that allows an attacker with Job/Configure or Computer/Configure permission, but without Ownership related permissions, to...

CVE-2018-1000107: Incorrect Authorization

An improper authorization vulnerability exists in Jenkins Job and Node Ownership Plugin 0.11.0 and earlier in OwnershipDescription.java, JobOwnerJobProperty.java, and OwnerNodeProperty.java that allow an attacker with Job/Configure or Computer/Configure permission and without Ownership related...

CVE-2018-1069: Improper Access Control

Red Hat OpenShift Enterprise version 3.7 is vulnerable to access control override for container network filesystems. An attacker could override the UserId and GroupId for GlusterFS and NFS to read and write any data on the network filesystem...

PT-2018-10054

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift Enterprise version 3.7 Description The issue allows an attacker to override access control for container network filesystems, specifically for GlusterFS and NFS. This could enable the attacker to read and write any data on th...

Apache ODE Override Vulnerability

Apache ODE is the United States Apache Apache Software Foundation , a business process building engine , it has to communicate with Web services , send and receive messages , handle data manipulation and error recovery functions . A security vulnerability exists in Apache ODE. An attacker could...

XMSWR-W18 of Shanghai Simmer Communication Technology Co., Ltd. suffers from an override access vulnerability

XMSWR-W18M is an intelligent wireless router from Shanghai Ximo Communication Technology Co. Ltd. XMSWR-W18 suffers from an override access vulnerability that allows an attacker to reset arbitrary devices without authentication...

YzmCMS v3.6 Existing Override Vulnerability

YzmCMS is a lightweight and open source content management system based on PHP+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other platforms. A vulnerability exists in YzmCMS v3.6. An attacker can exploit the vulnerability to access information beyond the authority...