BIT-GITLAB-2020-13263

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions...

BIT-GITLAB-2021-22186

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners...

BIT-GITLAB-2022-1124

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...

BIT-GITLAB-2022-4143

An issue has been discovered in GitLab affecting all versions starting from 15.7 before 15.8.5, from 15.9 before 15.9.4, and from 15.10 before 15.10.1 that allows for crafted, unapproved MRs to be introduced and merged without authorization...

BIT-GITLAB-2023-4700 Missing Authorization in GitLab

An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments, bypassing any required approvals...

Mattermost Authorization Issue Vulnerability (CNVD-2024-13545)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that stems from an inability to check the "inviteguest" permission when inviting people from other teams to join the team. A privileged...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity has an authorization issue...

Dell Secure Connect Gateway Authorization Issues Vulnerability

Dell Secure Connect Gateway is a secure connectivity gateway from Dell USA. Dell Secure Connect Gateway has an authorization issue vulnerability that stems from the Policy Manager containing an incorrect authorization vulnerability. No detailed vulnerability details are provided at this time...

Dell Secure Connect Gateway 授权问题漏洞

Dell Secure Connect Gateway is a secure connectivity gateway from Dell USA. Dell Secure Connect Gateway has an authorization issue vulnerability that stems from the Policy Manager containing an incorrect authorization vulnerability. No detailed vulnerability details are provided at this time...

PT-2024-22157 · Sirv · Sirv Image Optimizer

Name of the Vulnerable Software and Affected Versions: Sirv Image Optimizer, Resizer and CDN versions through 7.2.0 Description: A Missing Authorization issue affects the Image Optimizer, Resizer and CDN – Sirv. Recommendations: For versions through 7.2.0, update to a version that contains a fix...

CVE-2024-23493 Team associated AD/LDAP Groups Leaked due to missing authorization

Mattermost fails to properly authorize the requests fetching team associated AD/LDAP groups, allowing a user to fetch details of AD/LDAP groups of a team that they are not a member of...

SonicWALL SMA100 Authorization Issues Vulnerability

The SonicWALL SMA100 is a security access gateway device from SonicWALL, Inc. An authorization issue vulnerability exists in SonicWALL SMA100 10.2.1.10-62SV and prior versions, which stems from the presence of an access control error vulnerability. An attacker could exploit the vulnerability to...

GitLab Authorization Issues Vulnerability

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. An authorization issue exists in GitLab where a user with the role of "Guest"...

Red Hat Keycloak Authorization Issues Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. Red Hat Keycloak suffers from an authorization issue vulnerability that stems from the presence of an authentication error vulnerability...

IBM Storage Scale Authorization Issues Vulnerability

IBM Storage Scale is a storage solution from International Business Machines IBM designed to help organizations efficiently manage and scale storage resources to meet growing data storage needs. An authorization issue vulnerability exists in IBM Storage Scale Container Native, which stems from a...

Mastodon Authorization Issues Vulnerability

Mastodon is an open source social networking server based on ActivityPub. Mastodon suffers from an authorization problem vulnerability that stems from an authorization problem vulnerability in OpenID Connect...

CVE-2024-25106 OpenObserve Unauthorized Access Vulnerability in Users API

OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale. A critical vulnerability has been identified in the "/api/orgid/users/emailid" endpoint. This vulnerability allows any authenticated user within an organization to...

CVE-2024-25106 OpenObserve Unauthorized Access Vulnerability in Users API

OpenObserve is a observability platform built specifically for logs, metrics, traces, analytics, designed to work at petabyte scale. A critical vulnerability has been identified in the "/api/orgid/users/emailid" endpoint. This vulnerability allows any authenticated user within an organization to...

CVE-2024-25106

OpenObserve CVE-2024-25106 affects OpenObserve versions prior to 0.8.0. The issue is an Authorization flaw in the remove_user_from_org flow exposed at /api/{org_id}/users/{email_id}, allowing any authenticated organizational member to remove any other member (including Admin/Root), due to insuffi...

SonicWALL SonicOS 授权问题漏洞

SonicWALL SonicOS is a set of operating systems designed for SonicWall firewall appliances from SonicWALL, Inc. An authorization issue vulnerability exists in SonicWall SonicOS version 7.1.1-7040 that stems from incorrect authentication. A remote attacker could exploit the vulnerability by...