4 matches found
CVE-2023-45083
An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. An authenticated admin-level user may be able to delete the "admin" or "serveradmin" users, which prevents authentication from subsequently...
CVE-2020-24984
An issue was discovered in Quadbase EspressReports ES 7 Update 9. It allows CSRF, whereby an attacker may be able to trick an authenticated admin level user into uploading malicious files to the web server...
Privilege escalation
An Improper Privilege Management vulnerability exists in HyperCloud that will impact the ability for a user to authenticate against the management plane. An authenticated admin-level user may be able to delete the "admin" or "serveradmin" users, which prevents authentication from subsequently...
PT-2021-11094
Name of the Vulnerable Software and Affected Versions: Quadbase EspressReports ES version 7 Update 9 Description: An issue allows Cross-Site Request Forgery CSRF, whereby an attacker may trick an authenticated admin-level user into uploading malicious files to the web server. Recommendations: For...