CVE-2011-3349: Improper Privilege Management

lightdm before 0.9.6 writes in .dmrc and Xauthority files using root permissions while the files are in user controlled folders. A local user can overwrite root-owned files via a symlink, which can allow possible privilege escalation...

The vulnerability of the Advantech WebAccess remote monitoring software lies in the insecure management of privileges. This allows a perpetrator to elevate their privileges and gain access to files.

The vulnerability of Advantech WebAccess remote monitoring software relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to files...

CVE-2019-15332: Improper Privilege Management

The Lava Z61 Android device with a build fingerprint of LAVA/Z612GB/Z612GB:8.1.0/O11019/1533889281:user/release-keys contains a pre-installed app with a package name of com.android.lava.powersave app versionCode=400, versionName=v4.0.27 that allows any app co-located on the device to...

CVE-2019-15799: Improper Privilege Management

An issue was discovered on Zyxel GS1900 devices with firmware before 2.50AAHH.0C0. User accounts created through the web interface of the device, when given non-admin level privileges, have the same level of privileged access as administrators when connecting to the device via SSH while their...

CVE-2019-14590: Improper Privilege Management

Improper access control in the API for the IntelR Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2019-4418

Name of the Vulnerable Software and Affected Versions Norton App Lock versions prior to 1.4.0.503 Description The issue is related to insecure privilege management in the Norton App Lock utility. This can be exploited to bypass the app lock, allowing unauthorized access to the device. The exploit...

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...

PT-2019-4267

Name of the Vulnerable Software and Affected Versions Intel Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to insufficient access control in the firmware, which may allow a privileged user to potentially enable an escalation of privilege, denial of service,...

PT-2019-3899 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Win32k component of Windows operating systems, which is caused by insecure privilege management. This...

CVE-2019-1385

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate...

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux allows a hacker to obtain the server LDAP administrator password.

The vulnerability of the NSS-LDAP operating system packages for Astra Linux and Debian GNU/Linux is related to privilege management errors. Exploiting this vulnerability could allow a malicious individual to obtain the server LDAP administrator password...

Exploit for Improper Privilege Management in Apache Couchdb

CVE-2017-12635 Case study and PoC of CVE-2017-12635 Apache C...

CVE-2013-4251: Improper Privilege Management

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...

The vulnerability of the Windows Update Assistant’s update handling mechanism, related to insecure privilege management, allows a malicious actor to execute arbitrary code.

The vulnerability of the Windows Update Assistant’s update handling is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

CVE-2019-18365: Improper Privilege Management

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages...

The vulnerability of the command-line interface (CLI) of the Cisco TelePresence Collaboration Endpoint (CE) software allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface CLI of Cisco TelePresence Collaboration Endpoint CE software relates to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...

CVE-2019-4546: Improper Privilege Management

After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948...

The vulnerability of the Windows Error Reporting error reporting service allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Error Reporting error reporting service in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2019-15901: Improper Privilege Management

An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD. A setusercontext3 call with flags to change the UID, primary GID, and secondary GIDs was replaced on certain platforms: Linux and possibly NetBSD with a single setuid2 call. This resulted in neither...

The vulnerability of the Management Daemon (MGD) of the Junos OS allows a attacker to gain access to the target system with administrator privileges.

The vulnerability of the Management Daemon MGD in the Junos OS operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain access to the target system with administrator privileges...