1011 matches found
Design/Logic Flaw
The permission control of AIFU cashier management salary query function can be bypassed, thus after obtaining general user’s permission, the remote attacker can access account information except passwords by crafting URL parameters...
CVE-2021-42337
CVE-2021-42337 concerns the AIFU cashier management salary query function. A bypass of permission control allows a remote attacker who has obtained general user permission to access account information (excluding passwords) by crafting URL parameters. The issue is described across multiple source...
CVE-2021-42337 TVN-202110009
The permission control of AIFU cashier management salary query function can be bypassed, thus after obtaining general user’s permission, the remote attacker can access account information except passwords by crafting URL parameters...
anyone can create a vault by directly calling the factory
Handle jonah1005 Vulnerability details Impact MochiVaultFactory.solL26-L37 There's no permission control in the vaultFactory. Anyone can create a vault. The transaction would be reverted when the government tries to deploy such an asset. As the protocol checks whether the vault is a valid vault b...
CVE-2021-42331
The “Study Edit” function of ShinHer StudyOnline System does not perform permission control. After logging in with user’s privilege, remote attackers can access and edit other users’ tutorial schedule by crafting URL parameters...
CVE-2021-42331
CVE-2021-42331 affects ShinHer StudyOnline System: the Study Edit function lacks permission checks, allowing an authenticated user to craft URL parameters to access and edit other users’ tutorial schedules. Documented impact is authorization bypass with potential for modification of schedules; no...
CVE-2020-4654
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090...
Information disclosure
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090...
CVE-2020-4654
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information due to improper permission control. IBM X-Force ID: 186090...
Security Bulletin: Access Control Vulnerability Affects the User Interface of IBM Sterling File Gateway (CVE-2020-4654)
Summary IBM Sterling File Gateway has addressed the access control security vulnerability. Vulnerability Details CVEID: CVE-2020-4654 DESCRIPTION: IBM Sterling File Gateway could allow an authenticated user to obtain sensitive information due to improper permission control. CVSS Base score: 3.1...
Apple macOS Big Sur 权限许可和访问控制问题漏洞
Apple macOS Big Sur is a mobile app from Apple. Apple macOS Monterey is the 18th major version of MacOS, Apple's desktop operating system for Macintosh. macOS Catalina is Apple's suite of Catalina is Apple's proprietary operating system developed specifically for Mac computers. Several Apple...
Apple tvOS 权限许可和访问控制问题漏洞
Apple tvOS is a suite of smart TV operating systems from the U.S. company Apple. A vulnerability in privilege permission and access control issues exists in various Apple products, where processing of maliciously crafted web content could result in unintended content security policy...
Jetson Linux Permissions and Access Control Issues Vulnerability
Jetson Linux is an application software. High-performance, low-power computing for deep learning and computer vision makes it an ideal platform for compute-intensive projects. jetson Linux is vulnerable to a permission permission and access control issue that stems from nvmap allowing read-only...
CVE-2021-22389
There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed...
CVE-2021-22389
There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed...
CVE-2021-22389
There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed...
Spoofing
There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed...
CVE-2021-22389
There is a Permission Control Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause certain codes to be executed...
CVE-2021-22389
Technical details such as affected products, root cause, impact, and available fixes for CVE-2021-22389 are not provided in the supplied documents. Please monitor the sources for updates.