HCL Technologies HCL Sametime 授权问题漏洞

HCL Sametime, a conferencing solution from HCL Technologies, is vulnerable to an authorization issue in HCL Sametime version 11.6, which stems from an application where users can read group conversations without actively participating, which could be exploited to read sensitive information...

CVE-2022-1124

CVE-2022-1124 is an improper authorization vulnerability in GitLab CE/EE. It affects all versions prior to 14.8.6, all 14.9.0–14.9.3, and 14.10.0, allowing Guest project members to access the trace log of jobs when tracing is enabled. The initial description and connected records confirm the root...

CVE-2022-1124

An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled...

CVE-2022-1460

CVE-2022-1460 affects GitLab versions 9.2–14.8.5, 14.9.0–14.9.3, and 14.10.0–14.10.0. The issue is improper authorization on scheduled pipelines, allowing a malicious user to run a pipeline in another user’s context. Affected software is GitLab (CI/CD feature), with the root cause described as in...

Intel In-Band Manageability 授权问题漏洞

Intel In-Band Manageability is a software from Intel Corporation USA. Helps manage individual devices and uses extensions to allow control of multiple nodes through Intel Architecture hosts. Intel In-Band Manageability prior to version 2.13.0 has an authorization issue vulnerability that stems fr...

HUAWEI HarmonyOS License Issue Vulnerability (CNVD-2022-41788)

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. An authorization issue vulnerability exists in the HUAWEI HarmonyOS kernel, which stems from improper control of permissions in the...

Rancher Labs Rancher Licensing Issue Vulnerability (CNVD-2022-65014)

Rancher Labs Rancher is an open source enterprise-class container management platform from Rancher Labs, Inc. Rancher Labs Rancher is vulnerable to an authorization issue that could be exploited by an attacker to escalate a user with a restricted administrator role to full administrator...

TECSON/GOK SmartBox 授权问题漏洞

TECSON/GOK SmartBox is a family of electronic fuel tank management systems from TECSON/GOK, Germany. An authorization issue vulnerability exists in four products in the TECSON/GOK SmartBox family, which arises from a lack of fully implemented access control rules, which could allow a malicious us...

Link to Windows Service 授权问题漏洞

Link to Windows Service is used to link to windows service. A security vulnerability exists in Link to Windows Service versions prior to 2.3.04.1, which stems from incorrect authentication before linking to a Windows service...

IBM QRadar SIEM Authorization Issue Vulnerability (CNVD-2022-34985)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. IBM QRadar SIEM ha...

IBM QRadar SIEM Authorization Issue Vulnerability (CNVD-2022-34988)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...

WordPress plugin myCred 安全漏洞

WordPress is a set of blogging platform developed using the PHP language. myCred 2.4.4, a WordPress plugin, previously had an authorization issue vulnerability, which stems from the plugin's failure to perform any authorization and CSRF checks in the myCred tool's import and export AJAX operation...

IBM QRadar SIEM 授权问题漏洞

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An authorization...

Mattermost Licensing Issue Vulnerability

Mattermost is an open source collaboration platform from Mattermost, Inc. An authorization issue vulnerability exists in Mattermost 6.4.1 and earlier versions, which stems from an API that fails to properly protect permissions and can be exploited by an authenticated attacker to bypass restrictio...

pearweb 授权问题漏洞

pearweb is a PHP extension and application repository. pearweb has a security vulnerability that stems from a weak password recovery mechanism in include/users/passwordmanage.php, and no details of the vulnerability are currently available...

Samsung SMR Licensing Issue Vulnerability (CNVD-2022-63637)

Samsung SMR is a system patch package from South Korea's Samsung Samsung. An authorization issue vulnerability exists in versions prior to Samsung SMR Apr-2022 Release 1, which stems from incorrect authentication in ImsService and can be exploited to obtain IMSI without READPRIVILEGEDPHONESTATE...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. An authorization issue vulnerability exists in Mattermost 6.4.1 and earlier versions, which stems from an API that fails to properly protect permissions and can be exploited by an authenticated attacker to bypass restrictio...

CVE-2022-0920

The CVE-2022-0920 entry concerns WordPress plugins “Salon booking system Free and Pro” prior to version 7.6.3. Connected sources consistently describe an access control error in several endpoints that could let authenticated users view all bookings and other customers’ data. The vulnerability ste...

WordPress Amelia plugin management appointment authorization issue vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress Amelia plugin is vulnerable to an...

WordPress Amelia plugin Amelia SMS service authorization issue vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress Amelia plugin is vulnerable to a...