CVE-2021-36207

Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...

Input validation

Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...

CVE-2021-36207 Metasys privilege management

Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...

CVE-2021-36207

CVE-2021-36207 affects Johnson Controls Metasys ADS/ADX/OAS Servers versions 10 and 11, where improper privilege management could allow an authenticated user to elevate to administrator. Technical details across sources confirm the vulnerability lies in privilege handling for these servers, with ...

MoinMoin Improper Privilege Management

MoinMoin 1.2.2 and earlier could allow a remote attacker to gain elevated privileges, caused by an undisclosed Access Control List ACL vulnerability in the PageEditor...

The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Thunderbird email client, related to insecure management of privileges, allows a hacker to circumvent JavaScript execution restrictions.

The vulnerability of the Thunderbird email client is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on JavaScript execution remotely...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls, Inc. Equipment: Metasys ADS/ADX/OAS Servers Vulnerability: I mproper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated...

The vulnerability of the PHP programming language interpreter, related to privilege management errors, allows attackers to bypass the protection mechanisms defined by open_basedir.

The vulnerability of the PHP programming language interpreter and the SQLite database management system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass the protection mechanisms defined by openbasedir...

The vulnerability of the libxslt library in the PHP programming language allows attackers to create arbitrary files.

The vulnerability of the libxslt library in the PHP programming language is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to create arbitrary files remotely...

The vulnerability of the sessions subsystem in the PHP programming language interpreter allows attackers to intercept user sessions.

The vulnerability of the PHP interpreter’s sessions subsystem is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to intercept a user’s session...

The vulnerability of Fireware operating systems in network security devices like WatchGuard Firebox and XTM, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of Fireware operating systems in network security devices like WatchGuard Firebox and XTM lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

Vulnerability of the “applications/core/modules/front/system/content.php” component of Invision Power Board’s web forum software. This PHP programming language interpreter allows a hacker to execute arbitrary code.

The vulnerability in the “applications/core/modules/front/system/content.php” component of the Invision Power Board software, which is a PHP programming language interpreter, relates to insecure privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Improper Privilege Management - receptionist can view background services and log for admin

Description Hi there openemr maintainers, I would like to report an improper authorization vulnerability in your source code. Proof of Concept 1. Install openemr in your system and create an admin account and a receptionist account 2. Log in as receptionist and see that you don't see Reports...

PT-2022-2393 · Apache · Log4J

Name of the Vulnerable Software and Affected Versions: Apache Log4j versions prior to log4j-cve-2021-44228-hotpatch-1.1-13 Description: The issue is related to insecure privilege management in the Log4j Java logging program. It allows an attacker to escalate their privileges. Recommendations: For...

CVE-2022-22187 JIMS: Local Privilege Escalation vulnerability via repair functionality

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service JIMS allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the...

CVE-2022-22187

The CVE-2022-22187 entry describes an improper privilege management vulnerability in the Windows Installer framework used by Juniper Identity Management Service (JIMS). An unprivileged user can trigger a repair operation, causing file operations in the user’s %TEMP% folder, some executed from SYS...

Siemens SIMATIC CP 1543-1 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: SIMATIC CP 1543-1 Vulnerability : Improper Input Validation, Improper Privilege Management 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-16-327-01 Siemens...

The vulnerability of Xen hypervisors relates to the insecure management of privileges, which allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...