CVE-2020-16263: Exposure of Resource to Wrong Sphere

Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origins...

CVE-2020-27601: Exposure of Resource to Wrong Sphere

In BigBlueButton before 2.2.7, lockSettingsProps.disablePrivateChat does not apply to already opened chats. This occurs in bigbluebutton-html5/imports/ui/components/chat/service.js...

CVE-2020-16247

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource...

CVE-2020-16247: Exposure of Resource to Wrong Sphere

Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource...

CVE-2020-5386

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT Directory Table objects of all internally running services and gain knowledge of sensitive data of the system...

The vulnerability of the PAN-OS operating system, related to the exposure of resources for unauthorized areas, allows attackers to elevate their privileges to the root level.

The vulnerability of the PAN-OS operating system is related to the exposure of resources for malicious purposes. Exploiting this vulnerability can allow a perpetrator to elevate their privileges to the root level...

AppleiOS 13.5.1 Resource Exposure Vulnerability

Apple iOS version 13.5.1 suffers from an issue where it is possible to circumvent the copy and paste restriction from the company profile to the private profile. Thus, it is possible to extract attachments that can be previewed "Quick Look" in the native Mail client to any private app. Product:...

AppleiOS 13.5.1 Resource Exposure

Advisory ID: SYSS-2020-011 Product: Apple iOS Manufacturer: Apple Inc. Affected Versions: 13.3.1, 13.5.1 Tested Versions: 13.3.1, 13.5.1 Vulnerability Type: Exposure of Resource to Wrong Sphere CWE-668 Risk Level: Medium Solution Status: Open Manufacturer Notification: 2020-03-23 Solution Date: -...

openstack-manila: User with share-network UUID is able to show, create and delete shares

An access flaw was found in openstack-manila, where the API did not validate the user/project on commands. A malicious user having the UUID of a share-network could view, update, delete, or share resources that did not belong to them. Attackers could also create resources on shared networks for...

CVE-2020-12687: Exposure of Resource to Wrong Sphere

An issue was discovered in Serpico before 1.3.3. The /admin/attacmentsbackup endpoint can be requested by non-admin authenticated users. This means that an attacker with a user account can retrieve all of the attachments of all users including administrators from the database...

CVE-2020-8449: Exposure of Resource to Wrong Sphere

An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security filters...

CVE-2012-5639: Exposure of Resource to Wrong Sphere

LibreOffice and OpenOffice automatically open embedded content...

Rockwellautomation Powermonitor Exposure of Resource to Wrong Sphere

An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/remove administrators because access control is implemented on the client side via a disabled attribute for a BUTTON element. File data ot500247.nasl...

CVE-2007-3915: Exposure of Resource to Wrong Sphere

Mondo 2.24 has insecure handling of temporary files...

CVE-2013-4280: Exposure of Resource to Wrong Sphere

Insecure temporary file vulnerability in RedHat vsdm 4.9.6...

CVE-2009-5042: Exposure of Resource to Wrong Sphere

python-docutils allows insecure usage of temporary files...

CVE-2019-4314

IBM Security Guardium Big Data Intelligence SonarG 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. IBM X-Force ID: 1610141...

CVE-2019-4306: Exposure of Resource to Wrong Sphere

IBM Security Guardium Big Data Intelligence SonarG 4.0 specifies permissions for a security-critical resource which could lead to the exposure of sensitive information or the modification of that resource by unintended parties. IBM X-Force ID: 160986...

CVE-2019-13546: Exposure of Resource to Wrong Sphere

In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacker with physical access to a locked application screen, or an authorized remote desktop session host application user to break-out from the...

CVE-2019-4158

IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574...