6805 matches found
CVE-2021-4200: Improper Privilege Management
A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4...
PT-2022-10551
Name of the Vulnerable Software and Affected Versions SUSE Rancher versions prior to 2.5.13 SUSE Rancher versions prior to 2.6.4 Description A Improper Privilege Management issue in SUSE Rancher allows users with the restricted-admin role to escalate to full admin. This affects customers who...
GHSA-8XGX-75QW-6268 Improper privilege management in pyftpdlib
The ftpPORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via...
Improper privilege management in pyftpdlib
The ftpPORT function in FTPServer.py in pyftpdlib before 0.2.0 does not prevent TCP connections to privileged ports if the destination IP address matches the source IP address of the connection from the FTP client, which might allow remote authenticated users to conduct FTP bounce attacks via...
CVE-2021-36207
Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...
Input validation
Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...
CVE-2021-36207 Metasys privilege management
Under certain circumstances improper privilege management in Metasys ADS/ADX/OAS servers versions 10 and 11 could allow an authenticated user to elevate their privileges to administrator...
CVE-2021-36207
CVE-2021-36207 affects Johnson Controls Metasys ADS/ADX/OAS Servers versions 10 and 11, where improper privilege management could allow an authenticated user to elevate to administrator. Technical details across sources confirm the vulnerability lies in privilege handling for these servers, with ...
MoinMoin Improper Privilege Management
MoinMoin 1.2.2 and earlier could allow a remote attacker to gain elevated privileges, caused by an undisclosed Access Control List ACL vulnerability in the PageEditor...
The vulnerability of the Thunderbird email client, related to insecure management of privileges, allows a hacker to circumvent JavaScript execution restrictions.
The vulnerability of the Thunderbird email client is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to bypass restrictions on JavaScript execution remotely...
The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to increase their privileges
The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...
The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.
The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Johnson Controls Metasys
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls, Inc. Equipment: Metasys ADS/ADX/OAS Servers Vulnerability: I mproper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an authenticated...
The vulnerability of the PHP programming language interpreter, related to privilege management errors, allows attackers to bypass the protection mechanisms defined by open_basedir.
The vulnerability of the PHP programming language interpreter and the SQLite database management system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass the protection mechanisms defined by openbasedir...
The vulnerability of the libxslt library in the PHP programming language allows attackers to create arbitrary files.
The vulnerability of the libxslt library in the PHP programming language is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to create arbitrary files remotely...
The vulnerability of the sessions subsystem in the PHP programming language interpreter allows attackers to intercept user sessions.
The vulnerability of the PHP interpreter’s sessions subsystem is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to intercept a user’s session...
Vulnerability of the “applications/core/modules/front/system/content.php” component of Invision Power Board’s web forum software. This PHP programming language interpreter allows a hacker to execute arbitrary code.
The vulnerability in the “applications/core/modules/front/system/content.php” component of the Invision Power Board software, which is a PHP programming language interpreter, relates to insecure privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of Fireware operating systems in network security devices like WatchGuard Firebox and XTM, related to insecure privilege management, allows attackers to escalate their privileges.
The vulnerability of Fireware operating systems in network security devices like WatchGuard Firebox and XTM lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Improper Privilege Management - receptionist can view background services and log for admin
Description Hi there openemr maintainers, I would like to report an improper authorization vulnerability in your source code. Proof of Concept 1. Install openemr in your system and create an admin account and a receptionist account 2. Log in as receptionist and see that you don't see Reports...
