4518 matches found
GHSA-2W4H-F44W-968F Improper Privilege Management in Neo4j Graph Database
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 could allow authenticated users to execute commands with elevated privileges...
Improper Privilege Management in Neo4j Graph Database
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 could allow authenticated users to execute commands with elevated privileges...
GHSA-QPFW-4M9X-RXX8 Improper Privilege Management in Azure ms-rest-nodeauth
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability...
AVideo vulnerable to Improper Privilege Management
The import.json.php file before 8.9 for AVideo is vulnerable to a File Deletion vulnerability. This allows the deletion of configuration.php, causing certain privilege checks to not be in place, leading to privilege escalation to admin. Local File Inclusion may also leak credentials and important...
Improper privilege management in elasticsearch
In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fields that should be hidden. This could result in an attack...
Improper Privilege Management in Elasticsearch
Elasticsearch versions from 6.7.0 to 6.8.7 and 7.0.0 to 7.6.1 contain a privilege escalation flaw if an attacker is able to create API keys. An attacker who is able to generate an API key can perform a series of steps that result in an API key being generated with elevated privileges...
GHSA-JWQP-WH5G-4GMM CodeIgniter Improper Privilege Management
CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page. NOTE: A contributor to the CodeIgniter framework argues that the issue should not be attributed to CodeIgniter. Furthermore, the blog post reference shows an unknown...
CodeIgniter Improper Privilege Management
CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page. NOTE: A contributor to the CodeIgniter framework argues that the issue should not be attributed to CodeIgniter. Furthermore, the blog post reference shows an unknown...
Mysiteforme 代码问题漏洞
Mysiteforme is a privilege management system. A security vulnerability exists in Mysiteforme version v2.2.1, which can be exploited by an attacker to spoof requests to the server side...
Improper privilege management - Anyone can view room settings.
Description Hi bigbluebutton maintainers, I would like to report an improper privilege management, this allows anyone to view any room settings. Proof of Concept 1. To demonstrate the vulnerability, I've created a room https://demo.bigbluebutton.org/gl/hoa-j4s-sxx-5gn 2. Run this curl command to...
CVE-2022-29179 Improper Privilege Management in Cilium
Cilium is open source software for providing and securing network connectivity and loadbalancing between application workloads. Prior to versions 1.9.16, 1.10.11, and 1.11.15, if an attacker is able to perform a container escape of a container running as root on a host where Cilium is installed,...
CVE-2022-1770
Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2...
Input validation
Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1770 Improper Privilege Management in polonel/trudesk
Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2...
CVE-2022-1770
CVE-2022-1770 describes an issue of improper privilege management in the GitHub repository polonel/trudesk, affecting versions prior to 1.2.2. The provided description does not specify the exact component, module, or surface affected, nor the concrete exploit path, impact scope, or root cause det...
CVE-2022-1770 Improper Privilege Management in polonel/trudesk
Improper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2...
Trudesk 安全漏洞
Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Trudesk 1.2.2 that stems from improper privilege management...
Dell iDRAC9 Authorization Issues Vulnerabilities
The Dell iDRAC9 is a Dell Inc. offering that provides comprehensive, embedded management, and automation capabilities across the PowerEdge family of servers. One Controller. An authorization issue vulnerability exists in Dell iDRAC9 that arises from improper privilege management and can be...
Cybozu Garoon Operation Limit Bypass Vulnerability (CNVD-2022-53805)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. Cybozu Garoon suffers from an Operation Restriction Bypass vulnerability that originates from improper privilege...
Cybozu Garoon Operation Limit Bypass Vulnerability (CNVD-2022-54299)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. Cybozu Garoon suffers from an Operation Restriction Bypass vulnerability that originates from improper privilege...