CVE-2021-31839

CVE-2021-31839 affects McAfee Agent for Windows prior to 5.7.3. The issue is an improper privilege management that lets a local user modify the MA event folder, enabling adding false events or removing events from logs before they are sent to the ePO server. Impact is limited to local privilege e...

PT-2021-19541 · Mcafee · Mcafee Agent For Windows

Name of the Vulnerable Software and Affected Versions: McAfee Agent for Windows versions prior to 5.7.3 Description: The issue is related to improper privilege management, allowing a local user to modify event information in the MA event folder. This enables the user to add false events or remove...

McAfee Agent安全漏洞

Mcafee McAfee Agent MA is a McAfee client component that provides secure communication between ePolicy Orchestrator antivirus management platform and managed products. A security vulnerability exists in McAfee Agent versions prior to 5.7.3. The vulnerability stems from improper privilege manageme...

ZOLL Defibrillator Dashboard

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: ZOLL Equipment: Defibrillator Dashboard Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Use of Hard-coded Cryptographic Key, Cleartext Storage of Sensitive Information, Cross-site...

The vulnerability of the Trend Micro OfficeScan antivirus protection, related to privilege management errors, allows a perpetrator to elevate their privileges or cause service interruptions.

The vulnerability of the Trend Micro OfficeScan antivirus protection lies in privilege management errors. Exploiting this vulnerability allows a remote attacker to increase their privileges or cause service interruptions...

The vulnerability of the Nagios Fusion software for visualizing IT infrastructure’s operational status lies in its insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of the Nagios Fusion software for visualizing IT infrastructure’s operational status is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to increase their privileges by installing a malicious component containing PHP code...

PT-2021-3289 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows operating system, specifically concerning the Group Policy Services. It allows an attacker to elevate their...

PT-2021-3270 · Microsoft · Enhanced Cryptographic Provider +1

Name of the Vulnerable Software and Affected Versions: Microsoft Enhanced Cryptographic Provider affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Enhanced Cryptographic Provider, which can be exploited to elevate privileges. This...

PT-2021-3288 · Microsoft · Intune Management Extension

Name of the Vulnerable Software and Affected Versions: Microsoft Intune Management Extension affected versions not specified Description: The issue is related to privilege management errors in the Intune management extension for Windows operating systems. Exploitation of this issue may allow a...

PT-2021-3282 · Microsoft · Windows Mshtml Platform +1

Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: The issue is related to errors in privilege management within the Windows HTML Platform component of the Windows operating system. This can allow a remote attacker to bypass...

Johnson Controls Metasys

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Equipment: Metasys Servers, Engines, and Tools Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could give an authenticated...

PT-2021-3461

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An issue exists in the Windows Print Spooler related to insecure privilege management. This flaw allows remote attackers to execute arbitrary code, escalate privileges, and impact t...

Improper Privilege Management in mailtrain-org/mailtrain

BUG Lower level user can revoke access from a campaign for admin . IMPACT Admin will not be able to access perticular campaign .\ This happen when lower level user added admin to a campaign and them removed him . STEP TO REPRODUCE 1. From admin account goto http://localhost:3000/users and add a...

SUSE-SU-2021:1845-1 Security update for avahi

This update for avahi fixes the following issues: - CVE-2021-3468: avoid infinite loop by handling HUP event in clientwork bsc1184521. - CVE-2021-26720: drop privileges when invoking avahi-daemon-check-dns.sh bsc1180827 - Update avahi-daemon-check-dns.sh from Debian. Our previous version relied o...

PT-2021-3468 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insecure privilege management in the browser, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate privileges within the system by sending the file’s PID...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to delete any files in the system at will.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability could allow an attacker to delete arbitrary files from the system...

The vulnerability of the Titanium CNC system, related to privilege management errors, allows a hacker to elevate their privileges within the system and execute arbitrary code.

The vulnerability of the Titanium CNC system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges within the system and execute arbitrary code...

MesaLabs AmegaView Improper Privilege Management Vulnerability

MesaLabs AmegaView is a continuous monitoring system CMS from MesaLabs USA. A security vulnerability exists in MesaLabs AmegaView 3.0 and earlier versions, which can be exploited by an attacker to elevate the privileges of the...