CVE-2019-20474

An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue allowing a user with the Guest role read-only access to use and abuse it. One of the abuses allows performing network and port scan...

CVE-2019-20474

Zoho ManageEngine Remote Access Plus 10.0.447 contains an authorization issue in the mail-server configuration test feature that can be abused by a user with the Guest (read-only) role. The issue enables SSRF-like behavior, allowing network and port scanning of the localhost or other hosts on the...

Nextcloud Server Authorization Issues Vulnerability (CNVD-2020-12763)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An authorization issue vulnerability exists in Nextcloud Server. The vulnerability stems from a lack of authentication measures or insufficient authentication...

Nextcloud Circles Authorization Issues Vulnerabilities

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An authorization issue vulnerability exists in Nextcloud Circles. The vulnerability stems from a lack of authentication measures or insufficient authenticatio...

CloudBees Jenkins Pipeline GitHub Notify Step Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An authorization issue...

Atlassian Jira Server and Data Center Authorization Issues Vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An authorization issue vulnerability exists in Atlassian Jira Server and Data Center. The vulnerability stems from a lack of...

GitLab Authorization Issues Vulnerability (CNVD-2020-13192)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab...

Jamf Pro License Issue Vulnerability

Jamf Pro is an Apple device management solution from Jamf USA. Jamf Pro is vulnerable to an authorization issue. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. An attacker could exploit this vulnerability to...

CVE-2020-8422

CVE-2020-8422 affects Zoho ManageEngine Remote Access Plus (Credential Manager) before 10.0.450. The root cause is an authorization issue that lets a Guest‑role user enumerate credential metadata (name, type, username, domain/workgroup, description) for remote machines; passwords are not exposed....

CVE-2019-5472

An authorization issue was discovered in Gitlab versions 12.1.2, 12.0.4, and 11.11.6 that prevented owners and maintainer to delete epic comments...

CVE-2019-5472

An authorization issue was discovered in Gitlab versions 12.1.2, 12.0.4, and 11.11.6 that prevented owners and maintainer to delete epic comments...

CVE-2019-5472

CVE-2019-5472 : In GitLab, an authorization issue in versions older than 12.1.2, 12.0.4, and 11.11.6 prevented owners and maintainers from deleting epic comments. Affected components are the GitLab epics/authorization flow; the root cause is improper access control on epic comment deletion. Impac...

CVE-2019-5472

Removed by vendor...

CVE-2019-5474

CVE-2019-5474 concerns GitLab EE: an authorization flaw in versions earlier than 12.1.2, 12.0.4, and 11.11.6 allows merge request approval rules to be overridden without proper permissions. The connected records consistently describe the issue as an authorization problem affecting the merge reque...

Huawei Honor V30 License Issue Vulnerability

Huawei Honor V30 is a smartphone. An authorization issue vulnerability exists in previous versions of Huawei Honor V30 10.0.1.135 C00E130R4P1, which arises from an application in the system failing to perform proper identity checks on another application calling its interface, and can be exploite...

McAfee Threat Intelligence Exchange Server Authorization Issues Vulnerability

McAfee TIE Server is a network threat defense server from the U.S. company McAfee McAfee. An authorization issue vulnerability exists in the API in McAfee Threat Intelligence Exchange Server version 3.0.0. The vulnerability stems from a lack of authentication measures or insufficient authenticati...

SonicWall Email Security Appliance Authorization Issues Vulnerability

SonicWall Email Security Appliance is an email security appliance from SonicWall USA. An authorization issue vulnerability exists in SonicWall Email Security Appliance version 10.0.2 and earlier. The vulnerability stems from a lack of authentication measures or insufficient authentication strengt...

CloudBees Jenkins Team Concert Plugin Authorization Issue Vulnerability (CNVD-2020-11656)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . An authorization issue vulnerability exists in the methods related to forms in CloudBees Jenkins Team Concert Plugin 1.3.0 and prior versions. The vulnerability...

CloudBees Jenkins RapidDeploy Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An authorization issue...

GitLab Authorization Issues Vulnerability (CNVD-2020-12719)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An authorization issue vulnerability exists in GitLab...