4125 matches found
The vulnerability of the Content Security Policy mechanism implemented in Google Chrome allows a violator to circumvent existing access restrictions policies.
The vulnerability of the Content Security Policy mechanism implemented by Google Chrome is related to authentication errors. Exploiting this vulnerability can allow a remote attacker to circumvent existing access control policies...
CVE-2021-23175
NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device, which, with user intervention, may lead to escalation of privileges, information disclosure, data tampering, and denial...
CVE-2021-23175
NVIDIA GeForce Experience contains a vulnerability in user authorization, where GameStream does not correctly apply individual user access controls for users on the same device, which, with user intervention, may lead to escalation of privileges, information disclosure, data tampering, and denial...
CVE-2021-38900
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607...
CVE-2021-38900
IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607...
CVE-2021-38900
CVE-2021-38900 affects IBM BPM 8.5/8.6 and IBM BAW 18.0–21.0, where improper access controls could allow a privileged user to obtain highly sensitive information. Public sources (IBM Security Bulletin, IBM support pages, and related advisories) detail affected product versions within IBM Cloud Pa...
Stormshield Endpoint Security 安全漏洞
Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield Endpoint Security that stems from incorrect access controls configured in Stormshield's previous x...
Unspecified Vulnerability in IBM Business Automation Workflow (CNVD-2021-102796)
IBM Business Automation Workflow is a suite of workflow automation solutions from IBM USA. The product is mainly used for workflow management, compliance management, and features workflow visibility and scalability. A security vulnerability exists in IBM Business Automation Workflow that stems fr...
Security Bulletin: vulnerability affect IBM Cloud Pak for Business Automation Workflow Process Service (CVE-2021-38900)
Summary IBM Cloud Pak for Business Automaion Workflow Process Service could allow a privileged user to obtain highly sensitive information due to improper access controls. Vulnerability Details CVEID: CVE-2021-38900 DESCRIPTION: IBM Business Automation Workflow could allow a privileged user to...
Zoho ManageEngine Access Manager Plus 授权问题漏洞
ZOHO Zoho ManageEngine Access Manager Plus is a privileged session management solution from ZOHO for enterprises to centralize, secure, and manage remote access to privileged sessions.A security vulnerability exists in versions of Zoho ManageEngine Access Manager Plus prior to 4203. The...
Authorization Bypass
haproxy is vulnerable to authorization bypass. Lack of validation of the HTTP Host header could potentially result in bypass of access controls due to a mishandling of the Host and authority. The fix for the original CVE is correctly included in OpenShift 4.9.11.The release of OpenShift 4.9.6...
CVE-2021-45097
KNIME Server before 4.12.6 and 4.13.x before 4.13.4 when installed in unattended mode keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content...
Default credentials
KNIME Server before 4.12.6 and 4.13.x before 4.13.4 when installed in unattended mode keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content...
Knime Server 安全漏洞
A security vulnerability exists in Knime, the Swiss company's enterprise software for putting data science workflows into production, which stems from the fact that when an administrator password is saved in a file without file access controls, its contents can be read by all local users. No...
PT-2021-7947 · Microsoft +1 · Visual Studio +2
Name of the Vulnerable Software and Affected Versions: ASP.NET Core and Visual Studio affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the software development tool Microsoft Visual Studio, which is associated with insufficient access...
The vulnerability of the configuration management system and remote execution capabilities of SaltStack Salt, related to improper access restrictions, allows a perpetrator to gain unauthorized access to other restricted functions.
The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to improper access restrictions. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to other restricted functions...
Hillrom Welch Allyn Cardio Products
1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Hillrom Equipment: Welch Allyn Cardio Products Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access...
Hitachi Energy GMS600, PWC600, and Relion
1. EXECUTIVE SUMMARY CVSS v3 7.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: GMS600, PWC600, and Relion 670/650/SAM600-IO Vulnerability: Improper Access Controls 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled...