Improper Privilege Management

github.com/hashicorp/vault is vulnerable to Improper Privilege Management. The vulnerability is due to the RenewToken function within expiration.go which only refreshes group memberships when GroupAliases is not nil, along with non-empty EntityID and initialized identityStore. This logic could mi...

facileManager 安全漏洞

facileManager is a set of modular Web applications from facileManager Inc. An elevation of privilege vulnerability exists in facileManager that stems from improper privilege management. An attacker can exploit this vulnerability to gain elevated privileges on the system...

The vulnerability of the security user interface (Security UI) of Microsoft Edge and Google Chrome browsers allows a perpetrator to disclose protected information.

The vulnerability of the Security UI of Microsoft Edge and Google Chrome browsers is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

GHSA-M979-W9WJ-QFJ9 HashiCorp Vault Improper Privilege Management

HashiCorp Vault and Vault Enterprise versions 0.9.0 through 1.3.3 may, under certain circumstances, have an Entity's Group membership inadvertently include Groups the Entity no longer has permissions to. Fixed in 1.3.4...

GHSA-J6VV-VV26-RH7C HashiCorp Vault Improper Privilege Management

HashiCorp Vault and Vault Enterprise versions 0.11.0 through 1.3.3 may, under certain circumstances, have existing nested-path policies grant access to Namespaces created after-the-fact. Fixed in 1.3.4...

CVE-2024-23620

An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM...

IBM eFilm Workstation Security Breach

IBM eFilm Workstation is a software application for viewing medical images from International Business Machines IBM. A security vulnerability exists in IBM eFilm Workstation that stems from the presence of an improper privilege management vulnerability. An authenticated, local attacker could...

Huawei HarmonyOS and EMUI Privilege Management Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to a privilege...

Axis Communications P3225 and M3005 Network Cameras Improper Privilege Management (CVE-2017-20049)

A vulnerability, was found in legacy Axis devices such as P3225 and M3005. This affects an unknown part of the component CGI Script. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. This plugin only works with Tenable.ot. Please visit...

VulnCheck KEV: CVE-2023-41243

Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migration: from n/a through 0.9.90...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Microsoft Visual Studio software development tool lies in the insecure management of privileges, which allows a malicious actor to escalate their privileges.

The vulnerability of the Microsoft Visual Studio software development tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of FortiOS operating systems and FortiProxy proxy servers, which provide high accessibility, allows attackers to execute arbitrary code with elevated privileges.

The vulnerability of FortiOS operating systems and FortiProxy proxy servers, which are highly accessible, is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated privileges by sending specially crafted HTTP or...

The vulnerability of the microprogrammed software of Zyxel GS1900 series switches, related to insecure privilege management, allows attackers to execute arbitrary commands and elevate their privileges to the root level.

The vulnerability of the microprogrammed software of Zyxel GS1900 series switches is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary commands and elevate their privileges to the root level via SSH...

CVE-2023-44250

An improper privilege management vulnerability CWE-269 in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0 through 7.4.1 allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests...

CVE-2023-44250

An improper privilege management vulnerability CWE-269 in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0 through 7.4.1 allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests...

PT-2024-1103 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Win32k component in Windows operating systems and is associated with insecure privilege management. Exploitation of this issue may allow an attacker to elevate...

PT-2024-1104 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Win32k component of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment...

PT-2024-1008 · Fortinet · Fortiproxy +1

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.5 through 7.4.1 FortiProxy versions 7.4.0 through 7.4.1 Description: An improper privilege management issue allows an authenticated attacker to perform elevated actions via crafted HTTP or HTTPS requests. This can...