CVE-2021-34802: Improper Privilege Management

A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges...

Improper Privilege Management in opensource-socialnetwork/opensource-socialnetwork

💥 BUG unprivileged user can like to private album . 💥 IMPACT user who does not have permiison in private album still can comment in that album. 💥 STEP TO RERPODUCE There is two user called user-A and user-B.\ 1. First goto user-A account and create a private album . \ Lets album url is...

Improper Privilege Management in opensource-socialnetwork/opensource-socialnetwork

💥 BUG unprivileged user can comment to private album . 💥 IMPACT user who does not have permiison in private album still can comment in that album. 💥 STEP TO RERPODUCE There is two user called user-A and user-B.\ 1. First goto user-A account and create a private album . \ Lets album url is...

Improper Privilege Management in uvdesk/core-framework

✍️ BUG privilege escalation bug to pin a threads 🕵️‍♂️ Proof of Concept 1. Frist from admin account goto http://localhost/uvdesk/public/en/member/agents and add new user called user B with Agent role .\ Now gives user-B all tikceting permission like can update/add/edit/delete/lock/pin to a ticket...

Rancher Labs Rancher Licensing Issue Vulnerability

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. Rancher Labs Rancher has an authorization issue vulnerability that stems from the product's lack of effective privilege management for the management of critical resources, which could be...

Rancher Labs Rancher Access Control Error Vulnerability

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. An access control error vulnerability exists in Rancher Labs Rancher, which stems from the product's lack of effective privilege management for creating cloud credential IDs, which could be...

CVE-2021-33505: Improper Privilege Management

A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. Issue is fixed in Falco versions = 0.29.1...

Rancher Labs Rancher 授权问题漏洞

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. Rancher Labs Rancher has an authorization issue vulnerability that stems from the product's lack of effective privilege management for the management of critical resources, which could be...

Security Advisory - Privilege Escalation Vulnerability in some Huawei Products

There is a privilege escalation vulnerability in some Huawei products. Due to improper privilege management, a local attacker with common privilege may access some specific files in the affected products. Successful exploit will cause privilege escalation. Vulnerability ID: HWPSIRT-2020-05256 Thi...

PT-2021-15023

Name of the Vulnerable Software and Affected Versions: Huawei eCNS280 TD versions V100R005C00 through V100R005C10 Huawei eSE620X vESS versions V100R001C10SPC200 through V100R001C20SPC200 Description: The issue is related to improper privilege management in some Huawei products, allowing a local...

PT-2021-5215

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description The issue is related to unsafe privilege management in the Windows Cloud Files Mini Filter Driver. It allows an attacker to elevate privileges in the system...

PT-2021-4164

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows operating system kernel, allowing an attacker to bypass security mechanisms. A security-feature bypass vulnerability exist...

PT-2021-4152

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows InstallService, which is caused by insecure privilege management. This vulnerability can be exploited to allow a...

PT-2021-4161

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows operating system, specifically due to insecure privilege management. This vulnerability can be exploited by an...

PT-2021-4318

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description The issue is related to insecure privilege management in Visual Studio Code. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations At the...

PT-2021-3921

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows kernel. It allows an attacker to elevate their privileges. The estimated number of potentially affected devices worldwide ...

PT-2021-3923

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows Kernel, which is caused by insecure privilege management. Exploitation of this issue may allow an attacke...

PT-2021-5110

Name of the Vulnerable Software and Affected Versions Microsoft Windows Desktop Bridge affected versions not specified Description The issue is related to insecure privilege management in the Desktop Bridge application converter of the Microsoft Windows operating system. It allows an attacker to...

PT-2021-5178

Name of the Vulnerable Software and Affected Versions Windows Remote Access Connection Manager affected versions not specified Description The issue is related to insecure privilege management in the Remote Access Connection Manager RASMan service of the Microsoft Windows operating system. It...

PT-2021-6051

Name of the Vulnerable Software and Affected Versions Open Enclave SDK affected versions not specified Description The issue is related to insecure privilege management. Exploitation of this issue may allow an attacker to bypass security restrictions and elevate their privileges. Recommendations ...