2460 matches found
Authorization Bypass
elgg/elgg is vulnerablbe to authorization bypass. The vulnerability exists through the user-controlled key, userguid allowing unauthorized access to remote attackers...
CVE-2021-3964
elgg is vulnerable to Authorization Bypass Through User-Controlled Key...
CVE-2021-3964
elgg is vulnerable to Authorization Bypass Through User-Controlled Key...
CVE-2021-3964
elgg is vulnerable to Authorization Bypass Through User-Controlled Key...
CVE-2021-3964
elgg is vulnerable to Authorization Bypass Through User-Controlled Key...
CVE-2021-3964 Authorization Bypass Through User-Controlled Key in elgg/elgg
elgg is vulnerable to Authorization Bypass Through User-Controlled Key...
PT-2021-22684
Name of the Vulnerable Software and Affected Versions: elgg affected versions not specified Description: The issue is related to Authorization Bypass Through User-Controlled Key, which allows for unauthorized access. Recommendations: At the moment, there is no information about a newer version th...
elgg security vulnerabilities
Elgg is a set of open source social networking engine. The product blogs, file sharing, groups, and other features. A security vulnerability exists in elgg that stems from elgg's susceptibility to authorization bypass via a user-controlled key...
CVE-2021-38624: Authorization Bypass Through User-Controlled Key
Windows Key Storage Provider Security Feature Bypass Vulnerability...
CVE-2021-40355: Authorization Bypass Through User-Controlled Key
A vulnerability has been identified in Teamcenter V12.4 All versions V12.4.0.8, Teamcenter V13.0 All versions V13.0.0.7, Teamcenter V13.1 All versions V13.1.0.5, Teamcenter V13.2 All versions 13.2.0.2. The affected application contains Insecure Direct Object Reference IDOR vulnerability that allo...
Siemens Industrial Edge
1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Edge Management Vulnerability: Authorization Bypass Through User-controlled Key 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...
Zabbix universal monitoring system Authentication Bypass
The vulnerability of the Zabbix universal monitoring system relates to bypassing authentication by using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to bypass the login page, gain access to the dashboard, and then create a monitoring panel, report, screen,...
CVE-2021-31970: Authorization Bypass Through User-Controlled Key
Windows TCP/IP Driver Security Feature Bypass Vulnerability...
CVE-2020-6641
Two authorization bypass through user-controlled key vulnerabilities in the Fortinet FortiPresence 2.1.0 administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters...
Cacti local_graph_id Auth Bypass
The vulnerability of the localgraphid function in the Cacti server monitoring system is related to an authentication check error for viewing graphs. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...
Authorizations Bypass in the FortiPresence portal parameters
Two authorization bypass through user-controlled key vulnerabilities in the FortiPresence administration interface may allow an attacker to gain access to some user data via portal manager or portal users parameters...
McAfee Client Proxy Auth Bypass
The vulnerability of the McAfee Client Proxy software relates to the bypassing of authentication procedures by using a key controlled by the user. Exploiting this vulnerability allows an attacker to bypass web traffic scanning and gain access to blocked websites for a short period of time. This i...
CVE-2019-19259: Authorization Bypass Through User-Controlled Key
GitLab Enterprise Edition EE 11.3 and later through 12.5 allows an Insecure Direct Object Reference IDOR...
Authorization Bypass Through User-Controlled Key in Bagisto
In Webkul Bagisto before 0.1.5, the functionalities for customers to change their own values such as address, review, orders, etc. can also be manipulated by other customers...