3221 matches found
OpenFGA 授权问题漏洞
OpenFGA is OpenFGA's high performance and flexible authorization/licensing engine built for developers and inspired by Google Zanzibar. An authorization issue vulnerability exists in versions of OpenFGA prior to 0.3.1, which stems from an easy authorization bypass under certain circumstances...
CVE-2022-42351
Adobe Experience Manager (AEM) versions 6.5.14 and earlier are affected by CVE-2022-42351, an Incorrect Authorization vulnerability that allows a low-privileged attacker to disclose low-level confidential information and bypass certain security features without user interaction. Affected componen...
CVE-2022-42351
Adobe Experience Manager version 6.5.14 and earlier is affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to disclose low level confidentiality information. Exploitation of this issue doe...
SolarWinds Serv-U FTP Server 授权问题漏洞
SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the U.S. company SolarWinds. SolarWinds Serv-U FTP Server suffers from an authorization issue vulnerability that stems from the deployment of a common encryption key across all of its instances resulting in an...
CVE-2022-23741 Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full admin/owner privileges. An attacker would require an account with admin access to install a malicious GitHub App. This vulnerability was fixed in...
CVE-2022-23741
Summary : CVE-2022-23741 affects GitHub Enterprise Server. An incorrect authorization vulnerability allowed a scoped user-to-server token to escalate to full admin/owner privileges, requiring an admin to install a malicious GitHub App. The issue was fixed in versions 3.3.17, 3.4.12, 3.5.9, and 3....
CVE-2022-23741 Incorrect authorization in GitHub Enterprise Server token generation leading to full admin access
An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a scoped user-to-server token to escalate to full admin/owner privileges. An attacker would require an account with admin access to install a malicious GitHub App. This vulnerability was fixed in...
Contec CONPROSYS HMI System 授权问题漏洞
Contec CONPROSYS HMI System is an HTML5-based HMI Human Machine Interface/SCADA Supervisory Control and Data Acquisition software product from Contec Japan. An authorization issue vulnerability exists in CONPROSYS HMI System CHS, which arises from the use of password hashes instead of passwords f...
Secomea GateManager 授权问题漏洞
Secomea GateManager is a remote access server product from Secomea, Denmark. A security vulnerability exists in Secomea GateManager versions 9.4 through 9.7. An attacker has exploited the vulnerability to impersonate a previous user in certain login failures...
WordPress 授权问题漏洞
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress versions prior to 6.0.3 have an authorization issue vulnerability that stems from incorrect...
AMI MegaRAC 授权问题漏洞
AMI MegaRAC is a family of service processor products from AMI. Complete out-of-band or unlit remote management of computer systems independent of operating system state or location is available to troubleshoot computers and ensure service continuity. AMI MegaRAC has an authorization issue...
CVE-2022-41807
Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...
CVE-2022-41807
Missing authorization vulnerability exists in Kyocera Document Solutions MFPs and printers, which may allow a network-adjacent attacker to alter the product settings without authentication by sending a specially crafted request. Affected products/versions are as follows: TASKalfa 7550ci/6550ci,...
IBM WebSphere Automation 授权问题漏洞
IBM WebSphere Automation is an operations platform from International Business Machines IBM. automates operational activities to proactively mitigate security risks and accelerate threat remediation. A security vulnerability exists in IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps...
CVE-2022-32966
RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...
ROS-20220531-01
A vulnerability in the CUPS print server is related to a flaw in the authorization procedure. Exploiting the vulnerability could allow an attacker to escalate their privileges...
SAML 授权问题漏洞
SAML is a library for Ross Kinder individual developers that contains a partial implementation of the saml standard in golang. That is, it allows third parties to authenticate your users, or allows third parties to rely on us to authenticate their users. There is an authorization issue...
XWiki Platform 安全漏洞
XWiki Platform is the French company XWiki's set of Wiki platform for creating Web collaboration applications. An authorization issue vulnerability exists in XWiki Platform versions prior to 13.10.8, 14.0 and later, and 14.4.3 and earlier, which stems from incorrect privilege management and can b...
WordPress reSmush.it Image Optimizer License Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...