CVE-2021-42254: Exposure of Resource to Wrong Sphere

BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...

PT-2021-23567

Name of the Vulnerable Software and Affected Versions BeyondTrust Privilege Management versions prior to 21.6 Description The issue arises from the creation of a temporary file in a directory with insecure permissions. This is a general information about the problem, but specific details such as...

BeyondTrust Privilege Management 安全漏洞

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management that stems from the fact that BeyondTrust Privilege Management prior to version 21.6 creates temporary...

The vulnerability of the Windows Installer component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Active Directory service for Windows operating systems arises from the insecure management of privileges, allowing attackers to elevate their privileges within the system.

The vulnerability of the Active Directory service for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to escalate privileges within the system remotely...

The vulnerability of the NTFS file system of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the NTFS file system in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2021-42956

Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...

CVE-2021-42956

Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...

Information disclosure

Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...

CVE-2021-42956

Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...

CVE-2021-42956

CVE-2021-42956 affects Zoho ManageEngine Remote Access Plus Server for Windows, up to version 10.1.2132.6. Root cause: improper privilege management causes the server process to run as the logged-in user, enabling memory dump by non-admins. Impact: attacker could remotely dump sensitive informati...

PT-2021-23701

Name of the Vulnerable Software and Affected Versions Zoho Remote Access Plus Server Windows Desktop Binary versions prior to 10.1.2132.6 Description The issue is related to improper privilege management, allowing the process to launch as the logged-in user. This enables a non-admin user to perfo...

CVE-2021-42956: Improper Privilege Management

Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information disclosure vulnerability. Due to improper privilege management, the process launches as the logged in user, so memory dump can be done by non-admin also. Remotely, an attacker can dum...

Improper privilege management in Keycloak

A flaw was found in Keycloak, where it would permit a user with a view-profile role to manage the resources in the new account console. This flaw allows a user with a view-profile role to access and modify data for which the user does not have adequate permission...

GHSA-C9X9-XV66-XP3V Improper privilege management in Keycloak

A flaw was found in Keycloak, where it would permit a user with a view-profile role to manage the resources in the new account console. This flaw allows a user with a view-profile role to access and modify data for which the user does not have adequate permission...

CVE-2021-42286: Improper Privilege Management

Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability...

CVE-2021-41377: Improper Privilege Management

Windows Fast FAT File System Driver Elevation of Privilege Vulnerability...

CVE-2021-42303: Improper Privilege Management

Azure RTOS Elevation of Privilege Vulnerability...

PT-2021-4811 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the NTFS file system of the Windows operating system. It allows an attacker to elevate their privileges, potentially affecting the...

PT-2021-5123 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system. It allows an attacker to elevate their privileges. This can affect the system, potentially leading to...