Improper Privilege Management in shelljs/shelljs

Details If ShellJS scripts running locally are using ShellJS exec function, local users on the filesystem can read the stdout of the running ShellJS process to disclose sensitive information present in the privileged process. This may leak sensitive information present in the privileged process...

PT-2021-7041

Name of the Vulnerable Software and Affected Versions shelljs affected versions not specified Description The issue is related to Improper Privilege Management in the shelljs function exec, which is associated with insufficient access control. Exploitation of this issue may allow an attacker to...

The vulnerability of the Apache DolphinScheduler scheduler platform, related to privilege management errors, allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the Apache DolphinScheduler scheduler platform is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL queries...

The vulnerability of the AMD Graphics Driver’s emergency interface allows attackers to escalate their privileges.

The vulnerability of AMD’s graphics driver emergency interface is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

Improper Privilege Management in rhizome-conifer/conifer

Description Hi there, I would like to report an improper privilege escalation in conifer. Any user can view all recordings of other users. Proof of Concept 1. Go to https://conifer.rhizome.org/ and register 2 accounts, let's call it user1 and user2 2. Use user1 and create a collection, let's name...

CVE-2021-27445 Mesa Labs AmegaView Improper Privilege Management

Mesa Labs AmegaView Versions 3.0 and prior has insecure file permissions that could be exploited to escalate privileges on the device...

CVE-2021-36316

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation ...

CVE-2021-36316

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 are affected by an improper privilege management vulnerability in AUI. A malicious user with high privileges could disclose AUI information and perform unauthorized operations on AUI. The provided documents do not include deeper roo...

CVE-2021-36316

Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious user with high privileges could potentially exploit this vulnerability, leading to the disclosure of the AUI info and performing some unauthorized operation ...

The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has vulnerabilities related to insecure privilege management. This allows attackers to create accounts with administrator privileges.

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to insecure privilege management. Exploiting this vulnerability can allow a malicious actor to create an administrator-account using a specially crafted HTTP request...

PT-2021-7009 · Log4J · Log4J

Name of the Vulnerable Software and Affected Versions: Log4j affected versions not specified Description: The issue is related to insecure privilege management in the Log4j Java logging program. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At the...

The vulnerability of the SIMalliance Toolbox browser on Samsung devices allows a perpetrator to disclose protected information, extract location and IMEI information, or execute certain commands.

The vulnerability of the SIMalliance Toolbox browser on Samsung devices is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to disclose protected information, extract location and IMEI details, or execute certain commands using the SIM Toolkit S...

The vulnerability of the Juniper Extension Toolkit (JET) component in Juniper Networks’ Junos OS and Junper Networks’ Junos OS Evolved operating systems allows attackers to enhance their privileges within the system.

The vulnerability of the Juniper Extension Toolkit JET in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to insecure privilege management. Exploiting this vulnerability can allow an attacker, operating remotely, to enhance their privileges within th...

PatrOwl privilege management error vulnerability

PatrOwl is a scalable, free and open source solution for orchestrating secure operations. patrOwl is vulnerable to a privilege management error, which could be exploited by an attacker to download all lookup import files...

The vulnerability of Google Chrome’s Intents function allows attackers to circumvent existing access restrictions.

The vulnerability of Google Chrome’s Intents function is related to privilege management errors. Exploiting this vulnerability could allow a hacker to circumvent existing access restrictions...

The vulnerability of the Credential Security Support Provider Protocol (CredSSP) implementation in the Windows operating system allows a perpetrator to enhance their privileges.

The vulnerability of the Credential Security Support Provider Protocol CredSSP implementation in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Wibu-Systems CodeMeter Runtime

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Low attack complexity Vendor: Wibu-Systems AG Equipment: CodeMeter Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to crash the CodeMeter Runtime Server, which could...

The vulnerability of the Google Chrome browser installer, which allows a hacker to increase their privileges

The vulnerability of the Google Chrome browser installer is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges using a created binary file...

The vulnerability of the Downloads function in Google Chrome’s web browser allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system and the Google Chrome browser is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-43828

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format o...