1531 matches found
Improper Privilege Management in Snipe-IT
Snipe-IT prior to 5.3.9 is vulnerable to improper privilege management. A user who does not have access to the supplier module may view supplier content...
GHSA-V6VG-PXVV-G5CQ Improper Privilege Management in Snipe-IT
Snipe-IT prior to 5.3.9 is vulnerable to improper privilege management. A user who does not have access to the supplier module may view supplier content...
PT-2022-13297 · Snipe-It · Snipe-It
Name of the Vulnerable Software and Affected Versions: Snipe-IT versions prior to 5.3.11 Description: The issue concerns improper privilege management, allowing an unprivileged user to create maintenance for an asset. This can be exploited due to missing authorization in the software. Version...
CVE-2022-0611: Missing Authorization
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.11...
snipe-it 安全漏洞
Snipe-IT is an open source IT asset/license management system. snipe-it versions prior to 5.3.11 contain an elevation of privilege vulnerability that stems from improper privilege management in the software. An attacker could exploit the vulnerability to cause a non-privileged user to create...
CVE-2022-0579
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
CVE-2022-0579
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
CVE-2022-0579
The CVE-2022-0579 entry concerns Snipe-IT (Packagist snipe/snipe-it) before version 5.3.9. Several connected sources confirm an improper privilege management flaw that allows a user without access to the supplier module to view supplier content, indicating a privilege-related exposure rather than...
CVE-2022-0579 Missing Authorization in snipe/snipe-it
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
CVE-2022-0579 Missing Authorization in snipe/snipe-it
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
CVE-2022-0579
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
CVE-2022-0569
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9...
CVE-2022-0569
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9...
Buffer overflow
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9...
snipe-it 安全漏洞
Snipe-IT is an open source IT asset/license management system. security vulnerability exists in Packagist snipe/snipe-it versions prior to 5.3.9, which stems from improper privilege management. No details of the vulnerability are currently available...
CVE-2022-0579: Missing Authorization
Missing Authorization in Packagist snipe/snipe-it prior to 5.3.9...
Snipe-IT 信息泄露漏洞
Snipe-IT is an open source IT asset/license management system. snipe-it suffers from an information disclosure vulnerability that stems from the existence of two different responses for unregistered and registered email addresses in the password reset page. An attacker could use this vulnerabilit...
CVE-2022-0569 Observable Discrepancy in snipe/snipe-it
Observable Discrepancy in Packagist snipe/snipe-it prior to v5.3.9...
CVE-2022-0569
CVE-2022-0569 affects snipe/snipe-it, prior to v5.3.9, with an information-disclosure flaw caused by differences in password-reset responses that can enumerate registered user emails. Impact is information disclosure (email enumeration) and potential brute-force risk implied by exposed email list...