FortiManager Privilege Management Vulnerability

Fortinet FortiManager VM is a centralized network security management platform for virtual machines. FortiManager versions 5.2.1 and earlier, 5.0.10 and earlier, have a privilege management vulnerability in the WebUI FTP backup page implementation that can be exploited by an attacker to compromis...

PT-2020-2758 · Suse · Crowbar-Core +3

Name of the Vulnerable Software and Affected Versions: SUSE OpenStack Cloud 7 crowbar-core versions prior to 4.0+git.1578392992.fabfd186c-9.63.1 SUSE OpenStack Cloud 8 ardana-cinder versions prior to 8.0+git.1579279939.ee7da88-3.39.3 SUSE OpenStack Cloud 9 ardana-ansible versions prior to...

Improper Privilege Management

The parsecmd function in lib/gitlabshell.rb allows remote authenticated users to gain privileges and clone arbitrary repositories...

The vulnerability of SAP NetWeaver Java Application Server web applications, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of SAP NetWeaver Java Application Server web applications is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of Windows Media Services on Windows operating systems allows attackers to increase their privileges.

The vulnerability of Windows Media Services on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Norton App Lock tool, related to insecure management of privileges, allows a violator to gain unauthorized access to the device.

The vulnerability of the Norton App Lock utility is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to the device...

PT-2020-1558 · Apache +1 · Apache +1

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.3 Description: An issue in rConfig allows an attacker to bypass local security restrictions due to insecure privilege management in the /etc/sudoers file. This occurs after an update to the rConfig specific Apache...

The vulnerability of the IBM DB2 database management system, related to privilege management errors, allows a perpetrator to elevate their privileges.

The vulnerability of the IBM DB2 database management system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of Intel Ethernet 700 series controller microprogramming software, related to buffer overflow vulnerabilities, allows attackers to escalate their privileges, cause service failures, or gain unauthorized access to protected information.

The vulnerability of Intel Ethernet 700 series controller microprogramming software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

The vulnerability of the Apache Hadoop distributed development and execution platform, related to insecure privilege management, allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the Apache Hadoop distributed development and execution platform is related to insecure privilege management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

The vulnerability of the driver ilp60x64.sys in Intel Ethernet controllers of the 700 series allows attackers to gain increased privileges.

The vulnerability of the ilp60x64.sys driver for Intel Ethernet Series 700 controllers is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2019-5234 · Mit +2 · Kerberos +3

Name of the Vulnerable Software and Affected Versions: Debian-edu-config versions prior to 2.11.10 debian-lan-config versions prior to 0.26 Description: The issue is related to a security flaw in privilege management. Exploitation of this flaw can allow an attacker to gain unauthorized access to...

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers relates to insecure privilege management, allowing attackers to escalate their privileges.

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility lies in the insecure management of privileges, allowing attackers to elevate their privileges, cause service failures, and expose sensitive information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, and expose sensitive information...

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 allows attackers to enhance their privileges.

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 relates to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to enhance their privileges using a specially crafted file...

The vulnerability of the Windows Graphics component of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Graphics component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

Vulnerability of the Win32k component in Windows operating systems with insecure privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of Google Chrome, related to privilege management errors, allows a perpetrator to elevate their privileges.

The vulnerability of Google Chrome relates to privilege management errors. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created extension...

The vulnerability of the Windows Graphics component of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Graphics component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

PT-2019-5305 · Gnu +2 · Grub2 +2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: A flaw was found in the grub2-set-bootflag utility of grub2, related to insecure privilege management. This issue can be exploited by a local attacker running the utility under resource...