CVE-2025-36023

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the LocalStorage handler when manipulating the projectID argument. An attacker can gain unauthorized access to resources by providing a crafted value for this argument during local...

CVE-2025-36023

IBM Cloud Pak for Business Automation 24.0.0 through 24.0.0 IF005 and 24.0.1 through 24.0.1 IF002 could allow an authenticated user to view sensitive user and system information due to an indirect object reference through a user-controlled key...

CVE-2025-46387

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46386

CWE-639 Authorization Bypass Through User-Controlled Key...

PT-2025-32362 · Ibm · Ibm Cloud Pak For Business Automation

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Business Automation versions 24.0.0 through 24.0.0 IF005 IBM Cloud Pak for Business Automation versions 24.0.1 through 24.0.1 IF002 Description: The software contains a flaw that may allow an authenticated user to view...

CVE-2025-46387

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46386

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46387

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46387

CVE-2025-46387 describes an authorization bypass in Emby MediaBrowser (a media server) via a user-controlled key (CWE-639). The vulnerability is documented across multiple feeds (NVD/NVD-derived, CNVD, ENISA ENISA EUVD, CCTV-like references), consistently noting an authorization bypass mechanism ...

CVE-2025-46387

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46386

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46386

CVE-2025-46386 corresponds to a CWE-639 authorization bypass via a user-controlled key. Connected sources identify the affected software as Emby MediaBrowser (and related mentions), noting that the issue enables bypassing authentication through manipulation of a user-controlled key. The Red Hat/C...

CVE-2025-46386

CWE-639 Authorization Bypass Through User-Controlled Key...

PT-2025-32151 · Emby · Mediabrowser

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: This issue involves an authorization bypass through a user-controlled key. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-32153 · Emby · Mediabrowser

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: This issue involves an authorization bypass through a user-controlled key. Recommendations: At the moment, there is no information about a newer version that...

CVE-2025-52446

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

CVE-2025-52448

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux validate-initial-sql api modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before...

CVE-2025-52446

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

CVE-2025-52447

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux set-initial-sql tabdoc command modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12,...