PT-2021-11224

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.0 through 9.1.0 Description: The issue is related to a Backup/Restore Privilege implementation problem. A user with the BackupAdmin role may potentially exploit this, resulting in the ability to write da...

OTRS AG OTRSCIsInCustomerFrontend 权限许可和访问控制问题漏洞

OTRS AG OTRSCIsInCustomerFrontend is a management system from OTRS USA. It provides modern, flexible ticket and process management services. A privilege permission and access control issue vulnerability exists in OTRS AG OTRSCIsInCustomerFrontend, which stems from an agent being able to view and...

Oracle Hospitality Reporting and Analytics Installation Privilege Permission and Access Control Issues Vulnerability

Oracle Hospitality Reporting and Analytics is a suite of restaurant sales management solutions from Oracle. A privilege permission and access control issue vulnerability exists in Oracle Hospitality Reporting and Analytics Installation version 9.1.0, which allows a low-privileged attacker to log ...

EulerOS 2.0 SP2 : ipmitool (EulerOS-SA-2020-1649)

According to the version of the ipmitool package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It's been found that multiple functions in ipmitool before 1.8.19 neglect proper checking of the data received from a remote LAN party, which may...

ABB Ability System 800xA Privilege License and Access Control Issues Vulnerability

ABB Ability System 800xA is a distributed control system from ABB Switzerland for the industrial control industry. A privilege permission and access control issue vulnerability exists in ABB System 800xA all versions, which can be exploited by a local attacker to inject data and affect the view o...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 3.11 openshift-enterprise-apb-base-container security update

An update for openshift-enterprise-apb-base-container is now available for Red Hat OpenShift Container Platform 3.11. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

ZTE E8820V3 Privilege and Access Control Vulnerability

The ZTE E8820V3 is a Gigabit Dual Band 1200M with WiFi Smart Router. A privilege and access control vulnerability exists in ZTE E8820V3 V3.1.0.1000.4 and earlier versions. An attacker can exploit this vulnerability to tamper with DDNS parameters and conduct denial of service attacks via a specifi...

Cisco Unified Customer Voice Portal Privilege Permission and Access Control Issues Vulnerability

Cisco Unified Customer Voice Portal CVP is a solution that provides automated Internet Protocol IP-based customer self-service and call routing as a stand-alone Interactive Voice Response IVR system or integrated with a contact center. Operations, Administration, Maintenance and Provisioning OAMP...

Schneider Electric EcoStruxure Geo SCADA Expert Privilege Permission and Access Control Issues Vulnerability

Schneider Electric EcoStruxure Geo SCADA Expert is a suite of data acquisition and monitoring software SCADA from Schneider Electric, France. A vulnerability exists in a folder in Schneider Electric EcoStruxure Geo SCADA Expert ClearSCADA with privilege permission and access control issues. The...

CVE-2019-11109

Logic issue in the subsystem for IntelR SPS before versions SPSE504.01.04.275.0, SPSSoC-X04.00.04.100.0 and SPSSoC-A04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access...

Harbor Privilege Permission and Access Control Issues Vulnerability

Harbor is an open source trusted cloud native registry. The product is primarily used to store, sign and scan container images for vulnerabilities. A privilege permission and access control issue vulnerability exists in the core/api/user.go file in Harbor versions 1.7.0 through 1.8.2, which can b...

PT-2019-2991 · Microsoft · Visual Studio +1

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Git for Visual Studio affected versions not specified Description: The issue is related to errors in privilege management in the Git component of Microsoft Visual Studio. It allows an...

Microsoft Windows Common Log File System Driver Privilege Permission and Access Control Issues Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Common Log File System Driver is one of the common log file system drivers. A...

Intel SCS Discovery Utility Privilege Permission and Access Control Issues Vulnerability

Intel SCS Discovery Utility is a utility program from Intel Corporation USA for obtaining detailed data about Intel AMT. The Intel SCS Discovery Utility is vulnerable to a privilege permission and access control issue. The vulnerability stems from a lack of effective privilege permission and acce...

PT-2019-2000 · Mysql Server +5 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.15 and prior Description: A vulnerability in the MySQL Server component allows a high-privileged attacker with network access via multiple protocols to compromise the server. Successful attacks can result in the...

Rancher Labs Rancher Privilege Permission and Access Control Issues Vulnerability (CNVD-2019-43043)

Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. A vulnerability exists in Rancher Labs Rancher for privilege permission and access control issues. The vulnerability stems from a lack of effective privilege...

Rancher Labs Rancher Privilege Permission and Access Control Issues Vulnerability

Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. A vulnerability exists in Rancher Labs Rancher versions 2.0.0 through 2.1.5 for privilege licensing and access control issues. The vulnerability stems from a lack o...

Synology Android Moments Privilege Permission and Access Control Issues Vulnerability

Synology Android Moments is an Android-based application from Synology Inc. of Taiwan, China for viewing various documents stored in Synology Drive. A vulnerability exists in the privacy page of Synology Android Moments prior to version 1.2.3-199 due to privilege permission and access control...

UBUNTU-CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

PT-2012-1561

Name of the Vulnerable Software and Affected Versions Qemu versions 0.14.0 and earlier Description The issue arises from the change process uid function in os-posix.c, which fails to properly drop group privileges when the -runas option is used. This allows local guest users to access restricted...