Privilege Escalation

snipe-it is vulnerable to privilege escalation. The vulnerability exists due to lack of santization of the auth controls on api key creation...

snipe-it Access Control Error Vulnerability (CNVD-2022-08381)

Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, which stems from the presence of improper access controls in the software. No details of the vulnerability are currently available...

CVE-2022-0178

Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...

CVE-2022-0178

Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...

Authorization

Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...

CVE-2022-0178 Missing Authorization in snipe/snipe-it

Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...

CVE-2022-0178

CVE-2022-0178 affects snipe-it (Snipe-IT). Multiple connected sources describe a Missing Authorization/ improper Access Control vulnerability where users with no system permissions can see and create personal access tokens. Affected versions are prior to 5.3.8. Remediation: update to 5.3.8 or lat...

CVE-2022-0178 Missing Authorization in snipe/snipe-it

Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...

Improper Access Control

snipe/snipe-it is vulnerable to Improper Access Control. The vulnerability allows a remote authenticated attacker to view, edit and delete asset model information with DENY permissions...

PT-2022-13014 · Snipe-It · Snipe-It

Name of the Vulnerable Software and Affected Versions: snipe-it versions prior to 5.3.8 Description: The issue affects snipe-it due to a Missing Authorization vulnerability, which is also described as an Improper Access Control vulnerability. This allows users with no system permissions to see an...

Snipe-IT 访问控制错误漏洞

Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, which stems from the presence of improper access controls in the software. No details of the vulnerability are currently available...

CVE-2022-0179

snipe-it is vulnerable to Missing Authorization...

CVE-2022-0179

snipe-it is vulnerable to Missing Authorization...

Authorization

snipe-it is vulnerable to Missing Authorization...

CVE-2022-0179

CVE-2022-0179 – snipe-it : A Missing Authorization flaw (faulty access control) in snipe-it, an open-source IT asset/license management system. The vulnerability is described with partial confidentiality/integrity impact (C:L/I:L) and no availability impact in the NVD metrics, and is classified u...

Snipe-IT 安全漏洞

Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in snipe-it that stems from faulty access control. No details of the vulnerability are provided at this time...

CVE-2022-0179 Missing Authorization in snipe/snipe-it

snipe-it is vulnerable to Missing Authorization...

Unspecified vulnerability in snipe-it (CNVD-2022-10714)

Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in snipe-it that stems from faulty access control. No details of the vulnerability are provided at this time...

Improper Access Control in snipe/snipe-it

Description A user with no rights for API tokens can view the page where API tokens can be generated and can generate API tokens. Proof of Concept - Create a user with no permission for anything i.e. everything on deny. - Log in with this user to the web application. - Visit...

Improper Access Control in snipe/snipe-it

Description All bulk actions bulk-edit / bulk-delete / form info in asset models do not have access control checks Proof of concept 1: Grant view to Asset Models 2: UI for bulk-edit and bulk-delete is still enabled, proceed. 3: You may bulk-delete / edit any asset model Impact This vulnerability ...