The vulnerability of the application software interface of the operating system PAN-OS allows a perpetrator to enhance their privileges.

The vulnerability of the application programming interface of the PAN-OS operating system is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Ultimate Membership Pro plugin of the WordPress content management system allows a hacker to increase their privileges.

The vulnerability of the Ultimate Membership Pro plugin of the WordPress content management system is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to increase their privileges...

Arista Networks EOS Improper Privilege Management (SA0082)

On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundancy protocol configured with RPR or SSO, an existing unprivileged user can login to the standby supervisor as a root user, leading to a privilege escalation. Valid user credentia...

The vulnerability of the Red Hat OpenShift Container Platform corporate platform, related to insecure privilege management, allows a perpetrator to elevate their privileges and execute arbitrary commands.

The vulnerability of the Red Hat OpenShift Container Platform is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary commands using a specially created .gitconfig file during cloning processes...

PT-2024-8147 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 versions 10.5.3.x through 10.5.6.x Description: The issue is related to improper privilege management in the network operating system, which could allow an attacker to elevate their privileges. A low-privileged attacker...

Improper Privilege Management

Mattermost is vulnerable to an Improper Privilege Management. The vulnerability is due to improper permission protection, allowing authenticated users with a restricted custom admin role to bypass restrictions and view server logs and the server config.json file...

CVE-2024-9002

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries...

CVE-2024-9002

The CVE-2024-9002 entry concerns Schneider Electric Easergy Studio, an ICS/configuration tool. The vulnerability is described as CWE-269: Improper Privilege Management, where a non-admin authenticated user could escalate privileges by tampering with binaries, risking unauthorized access and impac...

CVE-2024-9002

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries...

Schneider Electric Easergy Studio 安全漏洞

Schneider Electric Easergy Studio is an IED support software for setup and configuration from Schneider Electric France. A security vulnerability exists in Schneider Electric Easergy Studio version 9.3.1 and prior versions, which arises from improper privilege management and could result in...

CVE-2024-22068

Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier...

CVE-2024-22068

Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier...

CVE-2024-22068 Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router

Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier...

CVE-2024-22068 Weak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router

Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier...

CVE-2024-22068

CVE-2024-22068 describes an Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S, 2800-4, 3800-8, and 160 series on 64-bit systems, allowing a Functionality Bypass. Affected product versions are V4.00.10 and earlier. Root cause is improper privilege management enabling bypass of restr...

CVE-2024-7048

In version v0.3.8 of open-webui, an improper privilege management vulnerability exists in the API endpoints GET /api/v1/documents/ and POST /rag/api/v1/doc. This vulnerability allows a lower-privileged user to access and overwrite files managed by a higher-privileged admin. By exploiting this...

CVE-2024-7048

Open-WebUI open-webui v0.3.8 contains an improper privilege management flaw in API endpoints GET /api/v1/documents/ and POST /rag/api/v1/doc, enabling a lower-privileged user to view and overwrite admin-owned files, risking integrity and availability of RAG models. Root cause: insufficient access...

CVE-2024-7048 IDOR in open-webui/open-webui

In version v0.3.8 of open-webui, an improper privilege management vulnerability exists in the API endpoints GET /api/v1/documents/ and POST /rag/api/v1/doc. This vulnerability allows a lower-privileged user to access and overwrite files managed by a higher-privileged admin. By exploiting this...

CVE-2024-7048 IDOR in open-webui/open-webui

In version v0.3.8 of open-webui, an improper privilege management vulnerability exists in the API endpoints GET /api/v1/documents/ and POST /rag/api/v1/doc. This vulnerability allows a lower-privileged user to access and overwrite files managed by a higher-privileged admin. By exploiting this...

ZTE ZXR10多款产品 安全漏洞

ZTE ZXR10 1800-2S and others are a wireless router from ZTE Corporation ZTE, China. A security vulnerability exists in various ZTE ZXR10 products, which stems from improper privilege management. The following products and versions are affected: ZTE ZXR10 1800-2S version V4.00.10 and prior version...