Samsung Mobile Device Authorization Issue Vulnerability

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices have an authorization issue vulnerability that can be exploited by an attacker to unbind an application from the screen without authentication...

Authorization

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

CVE-2020-1796

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

ONAP CLI Authorization Issues Vulnerability

The ONAP CLI is a command line interface for controlling ONAP from the ONAP project. An authorization issue vulnerability exists in ONAP CLI Dublin and prior versions. An attacker can exploit this vulnerability on ports 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271 to gain...

CVE-2019-18581

Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this...

CVE-2019-18581

Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this...

CVE-2019-18581

Dell EMC Data Protection Advisor (DPA) versions 6.3, 6.4, 6.5, 18.2 before patch 83, and 19.1 before patch 71 are affected by a server missing authorization in the REST API. A remote authenticated administrator could potentially modify the application’s allowed OS commands list, enabling arbitrar...

Multiple HP Products Licensing Issues Vulnerabilities

The HP ENVY 5000 All-in-One Printer M2U85A, among others, is a printer from Hewlett-Packard HP in the United States. An authorization issue vulnerability exists in multiple HP products, which can be exploited by attackers to bypass account lockout...

Huawei Honor V30 OxfordS-AN00A Authorization Issues Vulnerability

Huawei Honor V30 is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in Huawei Honor V30 OxfordS-AN00A prior version 10.0.1.167 C00E166R4P1. An attacker can exploit the vulnerability to obtain partial information with the help of a malicious application...

SAP Solution Manager Authorization Issues Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

Authorization

Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header...

Centreon Web Authorization Issues Vulnerability

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . Centreon Web has an authorization issue vulnerability that can be exploited by attackers to bypass...

SAP ERP and SAP S/4 HANA Authorization Issues Vulnerabilities

SAP ERP and SAP S/4 HANA are both integrated intelligent ERP systems. ERP is an enterprise resource management system that integrates enterprise management concepts, business processes, basic data, human and material resources, computer hardware and software. An authorization issue vulnerability...

Podman Authorization Issues Vulnerability

Podman is an engine for developing, managing and running OCI containers on Linux systems. An authorization issue vulnerability exists in Podman version 1.6.0 that stems from a lack of authentication measures or insufficient authentication strength in a networked system or product. No detailed...

CVE-2020-1791

CVE-2020-1791 affects Huawei Mate 20 smartphones with versions earlier than 10.0.0.185 (C00E74R3P8). The issue is described as an improper authorization vulnerability caused by a logic-judging error in certain scenarios, potentially allowing an attacker to switch to a third desktop after a sequen...

Authorization

Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180C185E6R3P3, earlier than 10.0.0.180C432E6R1P7, earlier than 10.0.0.180C636E5R2P3; HUAWEI Mate 20 RS versions earlier than 10.0.0.175C786E70R3P8; HUAWEI Mate 20 X versions earlier than 10.0.0.176C00E70R2P8; and Honor Magic2 versions...

Cisco Firepower Management Center Authorization Issues Vulnerability

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. An authorization issue vulnerability exists in Cisco Firepower Management Center. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in...

Zoho ManageEngine Remote Access Plus Authorization Issues Vulnerability

Zoho ManageEngine Remote Access Plus is a remote access solution from Zoho, Inc. Zoho ManageEngine Remote Access Plus is vulnerable to an authorization issue. An attacker can exploit this vulnerability to extract credentials including: credential name, credential type, username, domain/workgroup...

Nextcloud Talk Authorization Issues Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud Talk is vulnerable to an authorization issue. The vulnerability stems from errors such as configuration during operation of a networked system or...

Nextcloud Server Authorization Issues Vulnerability (CNVD-2020-12759)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An authorization issue vulnerability exists in Nextcloud Server. The vulnerability stems from a lack of authentication measures or insufficient authentication...