Tangro Business Workflow 授权问题漏洞

Tangro Business Workflow is a German Tangro company's internal control of the contents of SAP documents and the approval process for the visual drawing of the software. A vulnerability exists in Tangro Business Workflow prior to version 1.18.1 due to an authorization issue, which stems from a...

IBM多款产品授权问题漏洞

IBM Business Process Manager BPM and so on are products of IBM Corporation in the U.S. IBM Business Process Manager is a set of integrated business process management platform.IBM Business Automation Workflow is a set of workflow automation solutions. IBM Process Federation Server Component is an...

NZXT CAM 授权问题漏洞

NZXT CAM is a performance monitoring software for gaming computers from NZXT USA. The software can be used to manage computer performance, temperature, and devices to ensure that the computer is at optimal performance. NZXT CAM version 4.8.0 has an authorization issue vulnerability that stems fro...

IBM AIX and VIOS License Issues Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture.IBM VIOS is a virtual IO server. An authorization issue vulnerability exists in IBM AIX and VIOS, which allows local attackers to exploit the vulnerability with the ksu user command to gain ro...

SAP Netweaver AS JAVA Authorization Issues Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An authorization issue vulnerability exists in SAP Netweaver AS JAVA P2P Cluster Communication versions 7.11,...

Red Hat Keycloak 授权问题漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. Red Hat Keycloak has a security vulnerability that originates from the exploitation of the Client Registration API, which can be exploited by a...

SAP Solution Manager Authorization Issues Vulnerability (CNVD-2020-70951)

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

SAP ERP and SAP S/4 HANA Authorization Issues Vulnerability (CNVD-2021-03707)

SAP S/4 HANA and SAP ERP are both products of SAP, an intelligent, integrated ERP software for large organizations.SAP ERP is a family of software for ERP management. An authorization issue vulnerability exists in SAP ERP and SAP S/4 HANA that allows an authenticated attacker to view the cost...

Symantec Messaging Gateway Authorization Issues Vulnerability

Symantec Messaging Gateway is a suite of spam filters from Symantec USA. The product features anti-spam, anti-virus, advanced content filtering, and data leakage protection. An authorization issue vulnerability exists in Symantec Messaging Gateway prior to version 10.7.4. The vulnerability arises...

Linux kernel authorization issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from an authorization problem vulnerability. The vulnerability arises from a lack of authentication measures or insufficient authentication strength in a...

Mark Goldstein Eat Spray Love Authorization Issue Vulnerability

Mark Goldstein Eat Spray Love is a mobile app about fitness by Mark Goldstein personal developer. A security vulnerability exists in the Eat Spray Love mobile app that allows users to bypass authentication, logic to retrieve or modify information they would not normally have access to...

Cloudbees Jenkins Chaos Monkey Plugin Authorization Issue Vulnerability (CNVD-2020-70261)

Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . A security vulnerability exists in...

Linux-pam Authorization Issues Vulnerability

Linux-pam is a pluggable-supported system authentication software for Linux from the Linux-pam team. Linux-Pam suffers from an Authorization Problem vulnerability, which can be exploited by an attacker to bypass restrictions and escalate his privileges via the Linux-Pam root null password...

B&r Automation APROL Authorization Issues Vulnerability

B&r Automation APROL is a Linux-based process control system for industrial control applications from B&r Automation Australia. An authorization issue vulnerability exists in versions prior to B&R Industrial Automation APROL R4.2 V7.08, which can be exploited by an attacker to bypass authenticati...

OTRS ITSM Authorization Issues Vulnerability

OTRS ITSM is a suite of foundational solutions for IT service management organizations from OTRS Germany. The solution is based on ITIL best practices and provides management tools for request and fault management, problem management, change management and release management. A security...

MongoDB Ops Manager Authorization Issues Vulnerability

MongoDB Ops Manager is a solution from MongoDB, Inc. that supports the management, monitoring, and backup of MongoDB deployments. An authorization issue vulnerability exists in MongoDB Ops Manager that stems from a specially designed API call that could allow an authenticated user holding...

Johnson Controls Victor Web Client Authorization Issues Vulnerability

Johnson Controls Victor Web Client is a video management system of the United States Johnson Controls Johnson Controls company's Web client. The program allows users to view surveillance video from the video management system, check the status of equipment and other functions. An authorization...

IBM Sterling B2B Integrator Authorization Issues Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An authorization issue vulnerability exists in IBM Sterling B...

CVE-2020-24401 Incorrect permissions following the deletion of a user role or deactivation of a user

Magento versions 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect authorization vulnerability. A user can still access resources provisioned under their old role after an administrator removes the role or disables the user's account...

CloudBees Jenkins Active Directory Plugin Authorization Issue Vulnerability (CNVD-2020-61923)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Active Directory Plugin is used in which an...