PT-2024-35381 · Autolab · Autolab

Name of the Vulnerable Software and Affected Versions: Autolab version 3.0.1 Description: Autolab is a course management service that enables auto-graded programming assignments. There is an issue where CAs can view or edit the grade for any submission ID, even if they are not a CA for the class...

Moodle 授权问题漏洞

Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from an authorization issue vulnerability that stems from the need to perform additional checks to ensure that ...

Dolibarr 授权问题漏洞

Dolibarr is a Dolibarr open source application. It can help manage the activities of user organizations. An authorization issue vulnerability exists in Dolibarr that stems from the presence of an improper authorization vulnerability, where a user with partially restricted privileges is able to...

Budget Control Gateway 授权问题漏洞

Budget Control Gateway is a gateway component of the Budget Control application from BudgetControl open source. An authorization issue vulnerability exists in Budget Control Gateway versions prior to 1.2 that stems from failure to properly validate authentication tokens, allowing an attacker to...

Chatwoot 授权问题漏洞

Chatwoot is a Chatwoot open source application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud, and more. An authorization issue vulnerability exists in versions prior to Chatwoot 2.4.0 that stems from the presence of a session fixation...

Harbor 授权问题漏洞

Harbor is an open source registry from Harbor Open Source. Artifacts are protected through policy and role-based access control to ensure that images are scanned and are not vulnerable, and that images are signed as trusted. Harbor suffers from an authorization issue vulnerability that stems from...

Mattermost Authorization Issues Vulnerability (CNVD-2024-45314)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from improper authorization of /api/v4/channels requests, which can be exploited by an attacker with Read Groups privileges, but ...

PT-2024-39080 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.7R3 Description: The issue concerns improper authorization, allowing a local authenticated attacker to modify sensitive configuration files. Recommendations: For versions prior to 22.7R3, updat...

Microsoft Windows Task Scheduler 授权问题漏洞

Microsoft Windows Task Scheduler is an automation tool from Microsoft Corporation USA that allows users to automate scheduled tasks when specific conditions are met. An authorization issue vulnerability exists in Microsoft Windows Task Scheduler. An attacker could exploit the vulnerability to...

PT-2024-31241 · Mgt Commerce Gmbh · Cloudpanel

Name of the Vulnerable Software and Affected Versions: MGT-COMMERCE GmbH CloudPanel versions 2.0.0 through 2.4.2 Description: An Improper Authorization Access Control Misconfiguration issue allows low-privilege users to bypass access controls, gaining unauthorized access to sensitive configuratio...

trustee 授权问题漏洞

trustee is a component of Confidential Containers open source. An Authorization Problem vulnerability exists in trustee prior to version 0.8.2, which stems from the fact that an ART Attestation Results Token token generated by the AS may be manipulated by a MITM attacker, but can still be...

NVIDIA BlueField License Issue Vulnerability

NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField suffers from an authorization issue vulnerability that stems from mishandling of privileges, which can be exploited by an attacker to cause a denial of service, data tampering, and information disclosure...

CVE-2024-48953

An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated users to register their own authentication plugins in Logpoint, resulting in unauthorized access...

WordPress plugin Super Socializer 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

TOTOLINK LR350 License Issue Vulnerability

TOTOLINK LR350 is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK LR350 suffers from an authorization issue vulnerability that stems from an input value of 1 for the parameter authCode in /formLoginAuth.htm, which can lead to authorization bypass. No detailed vulnerability...

PT-2024-28189 · Rymera Web · Rymera Web Co Wholesale Suite

Name of the Vulnerable Software and Affected Versions: Rymera Web Co Wholesale Suite versions 2.1.12 and earlier Description: The issue is related to missing authorization, allowing access to functionality not properly constrained by Access Control Lists ACLs. This means that certain features or...

PT-2024-33394 · Wpchill · Wpchill Htaccess File Editor

Name of the Vulnerable Software and Affected Versions: WPChill Htaccess File Editor versions 1.0.18 and earlier Description: The issue is related to an Incorrect Authorization vulnerability, which allows accessing functionality not properly constrained by Access Control Lists ACLs. This means tha...

PT-2024-27584 · Unknown · Newspack Newsletters

Name of the Vulnerable Software and Affected Versions: Newspack Newsletters versions n/a through 2.13.2 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions n/a through...

Cisco Firepower Threat Defense and Cisco Adaptive Security Appliance Authorization Issues Vulnerability

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. Used to protect...

CVE-2024-50419

Incorrect Authorization vulnerability in Wpsoul Greenshift – animation and page builder blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Greenshift – animation and page builder blocks: from n/a through 9.7...