PT-2022-13805 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 6.4.1 and earlier Description: The issue is related to improper privilege management in Mattermost, where an API fails to properly protect permissions. This allows authenticated members with restricted custom admin roles t...

CVE-2022-24842 Improper Privilege Management in MinIO

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user is able to create service accounts for root or other admin users and then is able to assume their access policies via the generated credentials. Thi...

PT-2022-2759 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows an attacker to elevate their privileges...

PT-2022-2773 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to the Windows Print Spooler's insecure management of privileges, allowing an attacker to elevate their privileges. This can affect the system...

PT-2022-2883 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

PT-2022-2665 · Microsoft · Dynamics 365 On-Premises

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 On-Premises affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Dynamics 365. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2022-2662 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows Telephony Service of Windows operating systems. It allows an attacker to elevate their privileges. Thi...

PT-2022-2822 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

PT-2022-2941 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges. Recommendations: At the moment, there is...

PT-2022-2898 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

PT-2022-2775 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges. Recommendations: At the moment, there is...

PT-2022-2778 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to the Windows Print Spooler and involves insecure privilege management, allowing an attacker to elevate their privileges. This can affect the system...

PT-2022-2921 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to the Windows Print Spooler's insecure management of privileges, allowing an attacker to elevate their privileges. This can affect the system...

PT-2022-2777 · Microsoft · Windows Print Spooler +1

Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler. It allows an attacker to elevate their privileges, potentially affecting the system. No...

The vulnerability of the Icinga network availability monitoring system, related to insecure management of privileges, allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the Icinga network availability monitoring system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

PT-2022-7263 · Lenovo · Lenovo Tablet

Name of the Vulnerable Software and Affected Versions: Lenovo tablet software affected versions not specified Description: The issue is related to insecure privilege management in the software. It may allow an attacker to elevate their privileges. Additionally, there is a problem with an incorrec...

The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to increase their privileges.

The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the XENMAPSPACE_grant_table function in Xen hypervisors allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the XENMAPSPACEgranttable function in Xen hypervisors is related to insecure management of privileges. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the user profile service in the Microsoft Windows operating system allows a hacker to escalate their privileges.

The vulnerability of the user profile service in the Microsoft Windows operating system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Enforced Owner Can Extract Funds From The Contract

Lines of code Vulnerability details Impact During the code review, It has been observed that access control mechanisms are checked with the following line. LibDiamond.enforceIsContractOwner; The withdraw gaves abilitiy to contract owner extract all funds are sent to contract. This poses...