EUVD-2026-83678

The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promoteusers capability in its front-end import functionality, allowing users with only the createusers capability to change the role of existing users, including promoting them to administrator...

CVE-2025-43904

CVE-2025-43904 affects Slurm’s accounting subsystem before versions 24.11.5, 24.05.8, and 23.11.11. The issue allows a user with Coordinator privileges to promote another user to Administrator, representing an elevation of privilege in the accounting workflow. Documents from multiple vendors/advi...

Security update for slurm_23_02

This update for slurm2302 fixes the following issues: CVE-2025-43904: an issue with permission handling for Coordinators within the accounting system allowed Coordinators to promote a user to Administrator bsc1243666. Patch Instructions: To install this SUSE update use the SUSE recommended...

CVE-2019-5644

Computing For Good's Basic Laboratory Information System also known as C4G BLIS version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator...

PT-2019-17799

Name of the Vulnerable Software and Affected Versions Computing For Good's Basic Laboratory Information System C4G BLIS versions 3.5 and earlier Description The issue is related to improper access control, allowing an unauthenticated user to modify user account settings, including promoting any...