CVE-2017-18838: Improper Privilege Management

Certain NETGEAR devices are affected by privilege escalation. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2.15, M4300-52G-POE+ before 12.0.2.15, M4300-8X8F before 12.0.2.15, M4300-12X12F before 12.0.2.15, M4300-24X24F before 12.0.2.15, M4300-24X...

PT-2020-5324

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.2.40 Oracle VM VirtualBox versions prior to 6.0.20 Oracle VM VirtualBox versions prior to 6.1.6 Description The issue is related to insecure privilege management in the Core component of Oracle VM...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Privilege Management Error Vulnerability

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A privilege management error vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by an attacke...

CVE-2020-7273: Improper Privilege Management

Accessing functionality not properly constrained by ACLs vulnerability in the autorun start-up protection in McAfee Endpoint Security ENS for Windows Prior to 10.7.0 April 2020 Update allows local users to delete or rename programs in the autorun key via manipulation of some parameters...

CVE-2020-7259: Improper Privilege Management

Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security ENS Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file...

PT-2020-5635

Name of the Vulnerable Software and Affected Versions Intel PROSet/Wireless WiFi versions prior to 21.70 Description The issue is related to insecure inherited permissions in Intel PROSet/Wireless WiFi products, which may allow an authenticated user to potentially enable escalation of privilege v...

PT-2020-2052

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows operating system kernel. It allows an attacker to potentially elevate their privileges. Recommendations At the moment, the...

PT-2020-2151

Name of the Vulnerable Software and Affected Versions Microsoft RMS Sharing App for Mac affected versions not specified Description The issue is related to insecure privilege management in the Microsoft RMS Sharing App for Mac, allowing an attacker to load unsigned binaries. This could enable an...

Red Hat Keycloak Security Feature Issue Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security signature issue vulnerability exists in Red Hat Keycloak all versions. The vulnerability stems from a lack of security measures such...

CVE-2018-17954

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE...

CVE-2018-17954

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE...

Input validation

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE...

CVE-2018-17954

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE...

CVE-2018-17954

CVE-2018-17954 affects SUSE OpenStack Cloud Crowbar and Ardana components. It is an Improper Privilege Management in crowbar, enabling root users on any crowbar-managed node to become root on any other node. Affected versions include: SUSE OpenStack Cloud 7 crowbar-core < 4.0+git.1578392992.fa...

CVE-2018-17954: Improper Privilege Management

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE...

B&R Automation Studio

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: B&R Automation Equipment: Automation Studio Vulnerabilities: Improper Privilege Management, Missing Required Cryptographic Step, Path Traversal 2. RISK EVALUATION Successful exploitation of these...

CVE-2020-11464: Improper Privilege Management

An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users registered on the system. This includes their full name, privilege, email address, phone number, etc...

CVE-2020-11466: Improper Privilege Management

An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk tickets stored in database with numerous filters. This leaked sensitive information to unauthoriz...

The vulnerability of many components of the BlueZ software suite relates to insecure management of privileges, allowing attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of many components of the BlueZ software package is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Windows Error Reporting service on Windows operating systems allows a perpetrator to gain access to confidential information and system functions.

The vulnerability of the Windows Error Reporting service in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to access confidential information and system functions through a specially created application...