4474 matches found
CVE-2024-4428 Sensetive Data Exposure in Menulux Managment Portal
Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...
CVE-2024-4428 Sensetive Data Exposure in Menulux Managment Portal
Missing Authentication for Critical Function, Missing Authorization vulnerability in Menulux Information Technologies Managment Portal allows Collect Data as Provided by Users. This issue affects Managment Portal: through 21.05.2024...
CVE-2024-4428
CVE-2024-4428 affects Menulux Information Technologies Managment Portal. The issue is a Missing Authentication for Critical Function / Missing Authorization vulnerability in the portal, enabling collection of data provided by users due to improper access control. Affected status and remediation d...
Rockwell Automation ThinManager ThinServer
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Rockwell Automation Equipment : ThinManager ThinServer Vulnerabilities : Improper Privilege Management, Incorrect Permission Assignment for Critical Resource, Improper Input Validation 2...
Menulux Managment Portal 安全漏洞
Menulux Managment Portal is an information technology management portal from Menulux. A security vulnerability exists in Menulux Managment Portal that stems from the presence of an incorrect privilege management vulnerability that allows the collection of user-supplied data...
PT-2024-31103 · Menulux Information Technologies · Menulux Information Technologies Managment Portal
Name of the Vulnerable Software and Affected Versions: Menulux Information Technologies Managment Portal versions through 21.05.2024 Description: The issue is related to Improper Privilege Management, allowing the collection of data as provided by users. Recommendations: For Menulux Information...
CVE-2024-4555
Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1...
CVE-2024-4555 User impersonation with MFA when configure in specific way
Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1...
CVE-2024-4555
CVE-2024-4555 affects OpenText NetIQ Access Manager. The vulnerability is described as Improper Privilege Management that allows user impersonation in a specific scenario. Affected versions are prior to 5.0.4.1 and prior to 5.1. Public documents across NVD, Red Hat, CNNVD, PT-Security, and others...
HwameiStor 安全漏洞
HwameiStor is a Kubernetes-native Container Attached Storage CAS solution open-sourced by HwameiStor. A security vulnerability exists in HwameiStor that stems from a privilege management exception...
PT-2024-31687 · Opentext · Opentext Netiq Access Manager
Name of the Vulnerable Software and Affected Versions: OpenText NetIQ Access Manager versions prior to 5.0.4.1 OpenText NetIQ Access Manager versions prior to 5.1 Description: The issue is related to improper privilege management, allowing user account impersonation in a specific scenario...
Rockwell Automation ThinManager ThinServer Privilege Management Error Vulnerability
Rockwell Automation ThinManager is the United States Rockwell Rockwell Automation a thin client management software. A privilege management error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an attacker to submit a special request to read system fi...
The vulnerability of the Virtual Delivery Agent component of the Citrix Virtual Apps and Desktops (CVAD) virtualization and delivery software (formerly XenApp and XenDesktop) allows a malicious individual to escalate their privileges.
The vulnerability of the Virtual Delivery Agent component of the Citrix Virtual Apps and Desktops CVAD virtualization and delivery software formerly XenApp and XenDesktop is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileg...
The vulnerability of the Citrix Workspace App for Windows lies in its insecure handling of privileges, allowing an attacker to elevate their privileges to the SYSTEM level.
The vulnerability of the Citrix Workspace App for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the SYSTEM level...
GO-2022-0982 Improper Privilege Management in Gitea in code.gitea.io/gitea
Improper Privilege Management in Gitea in code.gitea.io/gitea...
GO-2022-0622 Improper Privilege Management in HashiCorp Nomad in github.com/hashicorp/nomad
Improper Privilege Management in HashiCorp Nomad in github.com/hashicorp/nomad...
GO-2022-0616 Improper Privilege Management in Mattermost in github.com/mattermost/mattermost-server
Improper Privilege Management in Mattermost in github.com/mattermost/mattermost-server...
GO-2022-0458 Improper Privilege Management in Cilium in github.com/cilium/cilium
Improper Privilege Management in Cilium in github.com/cilium/cilium...
Improper Privilege Management
github.com/kanisterio/kanister is vulnerable to Improper Privilege Management. The vulnerability is due to the edit ClusterRole having overly permissive permissions, including create, patch, and update verbs for daemonset resources, create verb for serviceaccount/token resources. An attacker can...