Input validation

Improper privilege management in all versions of GitHub Enterprise Server allows users with authorized access to the management console with an editor role to escalate their privileges by making requests to the endpoint used for bootstrapping the instance. This vulnerability affected GitHub...

Input validation

Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.1...

CVE-2023-6804

CVE-2023-6804 (GitHub Enterprise Server) : Improper privilege management allows arbitrary workflows to be committed and run using an improperly scoped Personal Access Token, provided a workflow already exists in the target repo. Affected: GitHub Enterprise Server versions 3.8–3.11.x (before fixes...

CVE-2023-6804 Improper Privilege Management allows for arbitrary workflows to be run

Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.1...

CVE-2023-6804 Improper Privilege Management allows for arbitrary workflows to be run

Improper privilege management allowed arbitrary workflows to be committed and run using an improperly scoped PAT. To exploit this, a workflow must have already existed in the target repo. This vulnerability affected all versions of GitHub Enterprise Server since 3.8 and was fixed in version 3.8.1...

CVE-2023-46647

GitHub Enterprise Server (GHES) suffers from improper privilege management that allows users with authorized access to the management console (editor role) to escalate privileges by making requests to the bootstrapping endpoint. Affected versions: GHES 3.8.0 and above. Remediations: upgrade to fi...

PT-2023-32779 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 3.8 through 3.8.11 GitHub Enterprise Server versions 3.9 through 3.9.6 GitHub Enterprise Server versions 3.10 through 3.10.3 GitHub Enterprise Server versions 3.11 through 3.11.0 Description: Improper privile...

The vulnerability of the application access control library in the SAP XS Advanced sap/xssec development, integration, and application extension platform in the SAP Business Technology Platform (BTP) environment arises from insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the application access control library in the SAP XS Advanced sap/xssec development, integration, and application extension platform in the SAP Business Technology Platform BTP environment is related to insecure management of privileges. Exploiting this vulnerability can allo...

The vulnerability of the application access control library in the SAP XS Advanced sap-xssec development, integration, and application extension platform in the SAP Business Technology Platform (BTP) environment is related to insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the application access control library in the SAP XS Advanced sap-xssec development, integration, and application extension platform in the SAP Business Technology Platform BTP environment is related to insecure management of privileges. Exploiting this vulnerability can allo...

The vulnerability of the cloud-security-services-integration-library library of the development, integration, and application extension platform in the SAP Business Technology Platform (BTP) virtual environment allows a perpetrator to enhance their privileges.

The vulnerability of the cloud-security-services-integration-library library of the development, integration, and application extension platform in the SAP Business Technology Platform BTP environment is related to insecure management of privileges. Exploiting this vulnerability could allow a...

The vulnerability of the authentication library in applications that use the SAP Identity Services (IAS) cloud-security-client-go development, integration, and extension platform for applications in the SAP Business Technology Platform (BTP) environment arises from insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the authentication library in applications that use the SAP Identity Authentication Service IAS on the SAP Business Technology Platform BTP for application development, integration, and expansion involves insecure management of privileges. Exploiting this vulnerability could...

CVE-2023-3907 Improper User Management in GitLab

A privilege escalation vulnerability in GitLab EE affecting all versions from 16.0 prior to 16.4.4, 16.5 prior to 16.5.4, and 16.6 prior to 16.6.2 allows a project Maintainer to use a Project Access Token to escalate their role to Owner...

Improper Privilege Management

sap-xssec is vulnerable to Improper Privilege Management. The vulnerability arises due to the lack of permission checks in the library. This allows an attacker to gain arbitrary permissions within the application under specific conditions, resulting in privilege escalation...

PT-2023-8588

Name of the Vulnerable Software and Affected Versions Hardy Barth cPH2 eCharge Ladestation versions 1.87.0 and earlier Description The issue is related to errors in privilege management in the web application of the Hardy Barth cPH2 eCharge Ladestation. Exploitation of this issue may allow a remo...

The vulnerability of the ASUSTOR Data Master operating system, related to errors in privilege management, allows a hacker to alter the configuration of storage devices.

The vulnerability of the ASUSTOR Data Master operating system is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to modify the configuration of storage devices...

CVE-2023-6793

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage...

CVE-2023-6793

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage...

CVE-2023-6793 PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage...

CVE-2023-6793 PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage...

CVE-2023-6793

CVE-2023-6793 affects Palo Alto Networks PAN-OS: an improper privilege management flaw allows an authenticated read-only admin to revoke XML API keys and disrupt XML API usage. Vulnerable if running PAN-OS versions: 9.0.x before 9.0.17-h4, 9.1.x before 9.1.17, 10.1.x before 10.1.11, 10.2.x before...