Aruba ClearPass Policy Manager 授权问题漏洞

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager that can be exploited by an attacker to access some unexpected features on ClearPass...

CVE-2021-32523

CVE-2021-32523 affects QSAN Storage Manager. The vulnerability is an improper authorization issue that allows remote privileged users to bypass access controls and execute arbitrary commands. Affected software is QSAN Storage Manager (QSAN Storage Manager version 3.3.1 and earlier per CNVD/CNNVD ...

A-Stage SCT-40CM01SR和AT-40CM01SR 授权问题漏洞

The A-Stage SCT-40CM01SR and A-Stage AT-40CM01SR are both high-definition LCD TVs from A-Stage Japan. The A-Stage SCT-40CM01SR and AT-40CM01SR suffer from an authorization issue vulnerability that can be exploited by an attacker to bypass access restrictions and execute arbitrary commands via...

Mitsubishi Electric Air Conditioning Systems 授权问题漏洞

Mitsubishi Electric Air Conditioning Systems is an air conditioning system from Mitsubishi Electric, a Japanese company. Mitsubishi Electric Air Conditioning Systems has an authorization issue vulnerability that stems from a flaw in the product's authorization mechanism...

Symantec Advanced Secure Gateway 和 Symantec ProxySG 授权问题漏洞

Symantec Advanced Secure Gateway and Symantec ProxySG are both security gateway appliances from Symantec Corporation. An authorization issue vulnerability exists in Symantec Advanced Secure Gateway ASG and ProxySG web management consoles. An unauthenticated attacker could exploit this vulnerabili...

CVE-2021-28563

Magento versions 2.4.2 and earlier, 2.4.1-p1 and earlier and 2.3.6-p1 and earlier are affected by an Improper Authorization vulnerability via the 'Create Customer' endpoint. Successful exploitation could lead to unauthorized modification of customer data by an unauthenticated attacker. Access to...

Shopware 授权问题漏洞

Shopware is a suite of open source e-commerce software from the German company Shopware. An authorization issue vulnerability exists in Shopware that stems from the lack of proper encryption of sessions in the system, which could allow an attacker to hijack a customer's session. The following...

Authorization

An improper authorization vulnerability in Palo Alto Networks Cortex XSOAR enables a remote unauthenticated attacker with network access to the Cortex XSOAR server to perform unauthorized actions through the REST API. This issue impacts: Cortex XSOAR 6.1.0 builds later than 1016923 and earlier th...

CVE-2021-22361

CVE-2021-22361 relates to an improper authorization vulnerability in Huawei products: eCNS280 V100R005C00/V100R005C10 and eSE620X vESS V100R001C10SPC200/V100R001C20SPC200. The issue is that file access is not authorized correctly, allowing a low-privileged attacker to perform privilege escalation...

Apollos Apps licensing issue vulnerability

Apollos Apps is an open source platform for distributing church-related applications. Apollos Apps suffers from an authorization issue vulnerability that stems from the fact that new user registrations only need to know basic personal information about anyone name, birthday, gender, etc. in order...

GHSA-W5RH-J4G3-JR29 Missing Authorization in Jenkins S3 publisher Plugin

Jenkins S3 publisher Plugin prior to 0.11.7 and 0.11.5.1 does not perform a permission check in an HTTP endpoint. This allows attackers with Overall/Read permission to obtain the list of configured profiles. S3 publisher Plugin 0.11.7 and 0.11.5.1 performs permission checks when providing a list ...

Apollos Apps 授权问题漏洞

Apollos Apps is an open source platform for distributing church-related applications. Apollos Apps suffers from an authorization issue vulnerability that stems from the fact that new user registrations only need to know basic personal information about anyone name, birthday, gender, etc. in order...

CLICK PLC CPU Modules 授权问题漏洞

CLICK PLC CPU Modules are Automation Direct's network devicesA single CLICK CPU Module can be connected to up to eight I/O modules to expand the number of system I/O and meet the needs of a specific application. An authorization issue vulnerability exists in Automation Direct CLICK PLC CPU Module...

Circutor SGE-PLC1000 Licensing Issue Vulnerability

Circutor SGE-PLC1000 is a smart metering system device. The main function is to manage utility power through CIRWATT meters or other meters with PRIME technology.An authorization issue vulnerability exists in Circutor SGE-PLC1000 firmware version 0.9.2b, which can be exploited by attackers to pas...

SilverStripe License Issues Vulnerability (CNVD-2021-50577)

SilverStripe is New Zealand SilverStripe Silverstripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe has an authorization issue vulnerability that stems from...

NetSetMan Pro 授权问题漏洞

NetSetMan Pro is a commercial version of NetSetMan's Network Setup Manager software. Easily switch between your pre-configured profiles. An authorization issue vulnerability exists in NetSetMan Pro, which originates from an unauthenticated attacker being able to open the Administrator shell and...

Intel Virtualization Technology for Direct I/O 授权问题漏洞

Intel Virtualization Technology for Direct I/O Intel VT-d is a part of Intel Virtualization Technology from Intel Corporation, which mainly targets the I/O subsystem, and is implemented by introducing a redirection unit in hardware, which is used to redirect DMA operations and interrupt passes to...

Cisco ASR 5000授权问题漏洞

The Cisco ASR 5000 is a 5000 Series gateway product from Cisco. An authorization issue vulnerability exists in all versions of the Cisco ASR 5000 Series that allows remote users to gain unauthorized access to the system...

xwiki-platform 授权问题漏洞

Thomas Mortagne xwiki-platform is an open source application by Thomas Mortagne. A general-purpose wiki platform that provides runtime services for applications built on it. xwiki-platform suffers from an authorization issue vulnerability that stems from the fact that a user who registers using...

嘉实资讯 CTS Web transaction system 授权问题漏洞

CTS Web transaction system is a CTS Web transaction system from Cascade Information Technology, Taiwan. The CTS Web transaction system suffers from an authorization issue vulnerability that stems from an incorrect implementation of the CTS Web transaction system related to authentication and...