Mattermost Desktop App Authorization Issue Vulnerability

Mattermost Desktop App is a messaging desktop application from Mattermost USA. An authorization issue vulnerability exists in Mattermost Desktop App versions prior to 4.4.0, which stems from the program failing to properly handle the popup of the HTTP Basic Authentication box and can be exploited...

CVE-2020-13263

An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perform limited actions...

CVE-2020-13263

CVE-2020-13263 describes an authorization issue in GitLab Enterprise Edition (EE) 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate a project maintainer and perform limited actions. The connected sources consistently identify the vulnerability as an impersonation/mai...

CVE-2020-13277

An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5...

Authorization

An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5...

CVE-2020-13277

An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5...

CVE-2020-13277

The CVE-2020-13277 issue is a real authorization flaw in GitLab’s repository mirroring logic that allowed read access to private repositories in CE/EE. Affected versions span GitLab CE/EE 10.6 through 13.0.5. Remediation per connected details: upgrade to GitLab fixes for the applicable lines (e.g...

PT-2020-13404 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 9.5 through 13.0.1 Description: An authorization issue was identified that could allow unauthorized users to impersonate a project maintainer, enabling them to perform limited actions. Recommendations: For GitLab EE version...

BIOTRONIK CardioMessenger II-S Authorization Issue Vulnerability (CNVD-2020-52056)

The Biotronik CardioMessenger II-S is a portable medical monitoring device from Biotronik Germany. An authorization issue vulnerability exists in Biotronik CardioMessenger II-S T-Line T4APP version 2.20 and II-S GSM T4APP version 2.20, which stems from the program using the same credentials for...

CVE-2020-13277: Incorrect Authorization

An authorization issue in the mirroring logic allowed read access to private repositories in GitLab CE/EE 10.6 and later through 13.0.5...

Zammad has an authorization problem vulnerability (CNVD-2021-22174)

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from an authorization issue vulnerability that can be exploited by an attacker to access recent tickets, merge tickets, and split ticket functionality...

Zammad is vulnerable to authorization issues

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from an authorization issue vulnerability that can be exploited by an attacker to register a new account using an email address that contains a non-existent domain of an existing organization, which in turn can be...

Apache TomEE Authorization Issues Vulnerability

Apache TomEE is the United States Apache Software Apache Software Foundation of a lightweight Java EE application server . An authorization issue vulnerability exists in Apache TomEE. An attacker can exploit the vulnerability by sending a specially crafted request using the 'useJMX=true' paramete...

F5 NGINX Controller Authorization Issue Vulnerability (CNVD-2020-51553)

F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5. The platform supports the management of multiple NGINX instances using a visual interface. An authorization issue vulnerability exists in F5 NGINX Controller versions 3.0.0 through 3.4.0 in NGINX Controller...

CVE-2020-9848

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

CVE-2020-9848

CVE-2020-9848 affects Apple iOS/iPadOS notifications: an authorization issue fixed in iOS 13.5 / iPadOS 13.5 due to improved state management. A person with physical access to an iOS device could potentially view notification contents from the lockscreen. The issue is documented across multiple s...

CVE-2020-9848: Undefined Security Weakness

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

PT-2020-20803 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 Description: An authorization issue was addressed with improved state management, allowing a person with physical access to an iOS device to potentially view notification contents from...

CloudBees Jenkins Project Inheritance Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Project Inheritance Plugin is used in one of...

Codeorigin Sysax Multi Server Authorization Issues Vulnerability

Codeorigin Sysax Multi Server is an FTP File Transfer Protocol server and Shell server for Windows from Codeorigin USA. An authorization issue vulnerability exists in Codeorigin Sysax Multi Server version 6.90. The vulnerability can be exploited by an attacker to access other user sessions with t...