ForgeRock AM code issue vulnerability

ForgeRock AM is an open source access management, privilege control platform with widespread use in universities and social organizations.ForgeRock AM is vulnerable to a code issue that could be exploited by an unauthenticated attacker to remotely execute arbitrary code by constructing a special...

Guild Wars 2 security vulnerabilities

Guild Wars 2 Guild Wars 2 is a role-playing computer client game. A security vulnerability exists in Guild Wars 2 launcher version 106916, which stems from improper privilege control. An authenticated attacker can use this vulnerability to modify an existing executable file with a binary of his...

Sensorweb ScadaBR code-related vulnerabilities

Sensorweb ScadaBR is a suite of open source software for developing automated data acquisition and monitoring applications from Sensorweb, Inc. A code issue vulnerability exists in ScadaBR 1.0 / 1.1CE. The vulnerability stems from a lack of effective privilege licensing and access control measure...

OpenIAM Improper Privilege Control Vulnerability

OpenIAM is a fully integrated identity and access management platform. A privilege control impropriety vulnerability exists in OpenIAM versions prior to 4.2.0.3. The vulnerability stems from OpenIAM not verifying that a user has permission to perform /webconsole/rest/api/ administrative operation...

OpenIAM security vulnerabilities

OpenIAM is a fully integrated identity and access management platform. A privilege control impropriety vulnerability exists in OpenIAM versions prior to 4.2.0.3. The vulnerability stems from OpenIAM not verifying that a user has permission to perform /webconsole/rest/api/ administrative operation...

Samba Kerberos Privilege Escalation

The vulnerability of the Kerberos protocol in Samba network communication software lies in the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows a malicious actor to cause service failures...

Samba Privilege Escalation

The vulnerability of the Active Directory Domain Controller AD DC in the Samba networking software package is related to the lack of privilege control mechanisms and access management tools. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its...

Samba smbd Privilege Bypass

The vulnerability of the samba networking interaction software library smbd is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability allows an attacker to compromise data integrity...

IBM Security Guardium Data Encryption Improper Privilege Control Vulnerability

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An improper privilege control vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. An attacker...

IBM Security Guardium Data Encryption Access Control Vulnerability

IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An improper privilege control vulnerability exists in IBM Security Guardium Data Encryption 3.0.0.2. An attacker...

GitLab Privilege Control Error Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A privilege control error vulnerability exists in GitLab 11.2 and later versions, which can be...

CloudBees Jenkins Perfecto Privilege Control Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A privilege control...

McAfee Agent Privilege Control Vulnerability

McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator antivirus management platform and managed products. A privilege control vulnerability exists in McAfee Agent. The vulnerability stems from an incorrect programmatic cal...

Google Chrome Extension Privilege Escalation

The vulnerability of Google Chrome browser extensions is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability allows a malicious actor to gain access to confidential data through a specially created extension...

Google Chrome Data Compromise

The vulnerability of the Chromium browser’s user interface in Google Chrome is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability allows a malicious actor to affect data integrity through a specially created HTML page...

fly-wm Privilege Escalation

The vulnerability of the fly-wm window manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to cause service failures...

GetInstalledPackages function in the Data Compromise

The vulnerability of the GetInstalledPackages function in the Application Lifestyle Management installation manager is related to the lack of mechanisms for privilege control and access management. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential...

PT-2020-22854

Уязвимость менеджера окон fly-wm связана с недостатком механизма контроля привилегий и средств управления доступом. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2020-3397

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 81.0.4044.92 Description The issue is related to an inappropriate implementation in extensions, which could allow an attacker to obtain potentially sensitive information via a crafted Chrome Extension if a user ...

Win32k Privilege Escalation

Vulnerability of the Win32k component in Windows operating systems with insecure privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...