Privilege escalation

An improper privilege management vulnerability CWE-269 in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests...

CVE-2023-45581

Fortinet FortiClientEMS contains an improper privilege management vulnerability (CWE-269). FortiClientEMS versions 7.2.0–7.2.2 and older than 7.0.10 let a Site administrator with Super Admin privileges perform global administrative operations affecting other sites via crafted HTTP/HTTPS requests....

CVE-2023-45581

An improper privilege management vulnerability CWE-269 in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests...

CVE-2023-45581

An improper privilege management vulnerability CWE-269 in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests...

EBM Technologies RISWEB Security Vulnerability

EBM Technologies RISWEB is an application from China-based EBM Technologies EBM Technologies. A security vulnerability exists in EBM Technologies RISWEB that stems from improper privilege management. The vulnerability allows an attacker to view specific pages and query sensitive data without...

The vulnerability of the Hardy Barth eCharge web application, related to errors in privilege management, allows a perpetrator to escalate their privileges.

The vulnerability of the Hardy Barth eCharge charging station’s web application is related to errors in privilege management. Exploiting this vulnerability allows a remote attacker to increase their privileges...

Wago Multiple Products Improper Privilege Management (CVE-2023-3379)

Wago web-based management of multiple products has a vulnerability which allows an local authenticated attacker to change the passwords of other non-admin users and thus to escalate non-root privileges. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

The vulnerability of Lenovo’s software products lies in the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of Lenovo’s tablet software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2024-1749

Name of the Vulnerable Software and Affected Versions ESET versions prior to the fixed version Description The issue is related to a local privilege escalation vulnerability that potentially allows an attacker to misuse ESET’s file operations to delete files without having proper permission. This...

PT-2024-1607 · Unknown · Harmony Control Relay Rmnf22Tb30 +1

Name of the Vulnerable Software and Affected Versions: Harmony Control Relay RMNF22TB30 and Harmony Timer Relay RENF22R2MMW affected versions not specified Description: The issue is related to an Improper Authentication vulnerability that could cause unauthorized tampering of device configuration...

The vulnerability in the sudo system administration program relates to improper privilege management. This allows a malicious actor to bypass existing security restrictions and retain their privileges after they are revoked.

The vulnerability in the sudo system administration program relates to improper privilege management when processing ipahostname. In this case, ipahostname, which is located in /etc/sssd/sssd.conf, was not propagated to sudo. Exploiting this vulnerability allows a malicious actor to bypass existi...

The vulnerability of the microprogrammed software of the three-phase voltage control relay Harmony Control Relay RMNF22TB30 and the Harmony Timer Relay RENF22R2MMW allows a intruder to alter the device’s configuration.

The vulnerability of the microprogrammed voltage-controlled relays Harmony Control Relay RMNF22TB30 and Harmony Timer Relay RENF22R2MMW lies in errors during privilege management. Exploiting this vulnerability could allow an attacker to remotely alter the device’s configuration...

CVE-2024-1250 Privilege Chaining in GitLab

An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with managegroupaccesstokens permission, they may be able to create group access tokens with Owner privileges, which may lead to privilege escalation...

The vulnerability of the REFRESH MATERIALIZED VIEW CONCURRENTLY function in the PostgreSQL database management system allows attackers to execute arbitrary SQL commands.

The vulnerability of the REFRESH MATERIALIZED VIEW CONCURRENTLY function in the PostgreSQL database management system is related to privilege management errors during the processing and validation of command-line parameters. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of Lenovo tablet products’ microprogramming software, related to insecure privilege management, allows a perpetrator to execute arbitrary commands.

The vulnerability of Lenovo tablet products’ microprogramming software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to execute arbitrary commands...

PT-2024-1746 · Fortinet · Forticlientems

Name of the Vulnerable Software and Affected Versions: Fortinet FortiClientEMS versions 7.2.0 through 7.2.2 Fortinet FortiClientEMS versions before 7.0.10 Description: The issue is related to improper privilege management, allowing a Site administrator with Super Admin privileges to perform globa...

Improper Privilege Management

minio is vulnerable to Improper Privilege Management.The vulnerability is due to access keys inheriting permissions from parent keys, including admin rights, allowing them to override their own permissions...

Improper Privilege Management

sudo is vulnerable to Improper Privilege Management. The vulnerability is caused due to a flaw in handling of ipahostname, where ipahostname from /etc/sssd/sssd.conf was not propagated in sudo. This results in client hosts retain privileges even after retracting them leading to privilege...

SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2023-0012)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by multiple vulnerabilities with impact to SonicOS Management Web Interface and SSLVPN Portal, but not SonicWall SSLVPN SMA100 and SMA1000 series products. These vulnerabilities...

FacileManager Elevation of Privilege Vulnerability

facileManager is a set of modular Web applications from facileManager Inc. An elevation of privilege vulnerability exists in facileManager that stems from improper privilege management. An attacker can exploit this vulnerability to gain elevated privileges on the system...