4528 matches found
CVE-2021-43828
PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format o...
Design/Logic Flaw
PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format o...
CVE-2021-43828 Improper Privilege Management in Patrowl
PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format o...
CVE-2021-43828
PatrOwl PatrowlManager contains an IDOR in versions prior to 1.77/1.7.7 that lets unauthenticated users download all finding import files. The files are stored in /media/imports//, with predictable owner_id and tmp_file formats (e.g., import__.json), enabling unauthorized access to the import fin...
Advantech R-SeeNet
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...
PT-2021-5654 · Microsoft · Windows Ntfs +1
Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is related to insecure privilege management in the Windows NTFS file system, allowing an attacker to elevate their privileges. This can impact the system, potentially enablin...
PatrOwl 安全漏洞
PatrOwl is a scalable, free and open source solution for orchestrating secure operations. patrOwl is vulnerable to a privilege management error, which could be exploited by an attacker to download all lookup import files...
PT-2021-6301 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the NTFS file system of the Windows operating system. It allows an attacker to potentially elevate their privileges, affecting the...
Exploit for CVE-2021-34527
C...
The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to escalate their privileges within the system.
The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges within the system...
The vulnerability of the file system driver of the Windows operating system allows a hacker to escalate their privileges.
The vulnerability of the Windows operating system’s file system driver is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Remote Access Connection Manager (RASMan) service in the Microsoft Windows operating system allows a hacker to increase their privileges.
The vulnerability of the Remote Access Connection Manager RASMan service in the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of system applications in the HarmonyOS operating system, related to privilege management errors, allows a perpetrator to alter the user’s pseudonym.
The vulnerability of HarmonyOS’ system applications is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to remotely change a user’s username...
The vulnerability of the Cloud Files Mini Filter Driver for the Microsoft Windows operating system allows a hacker to elevate their privileges within the system.
The vulnerability of the Cloud Files Mini Filter Driver for the Microsoft Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to escalate privileges within the system...
Improper Privilege Management in patrowl/patrowlmanager
Description Hi there, I would like to report an improper privilege management in PatrowlManager - it's an IDOR. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format of import, for example: import11639213059582.json This filename is...
Linux Kernel Improper Privilege Management Vulnerability
Kernel/ptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access...
The vulnerability of Visual Studio Code’s source editor lies in its insecure handling of privileges, allowing attackers to elevate their privileges.
The vulnerability of Visual Studio Code’s source editor is related to the insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Improper Privilege Management in devise_masquerade
The devisemasquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of security protection compared to a situation where Devise without this extension is used. If the...
GHSA-25F5-GC4H-HC22 Improper Privilege Management in devise_masquerade
The devisemasquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of security protection compared to a situation where Devise without this extension is used. If the...
