Johnson Controls Victor Web Client Authorization Issues Vulnerability

Johnson Controls Victor Web Client is a video management system of the United States Johnson Controls Johnson Controls company's Web client. The program allows users to view surveillance video from the video management system, check the status of equipment and other functions. An authorization...

IBM Sterling B2B Integrator Authorization Issues Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An authorization issue vulnerability exists in IBM Sterling B...

CVE-2020-24401 Incorrect permissions following the deletion of a user role or deactivation of a user

Magento versions 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect authorization vulnerability. A user can still access resources provisioned under their old role after an administrator removes the role or disables the user's account...

CloudBees Jenkins Active Directory Plugin Authorization Issue Vulnerability (CNVD-2020-61923)

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Active Directory Plugin is used in which an...

IBM Security Directory Server Authorization Issues Vulnerability

IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. An authorization issue vulnerability exists in IBM Security...

Authorization

The God Kings application 0.60.1 for Android exposes a broadcast receiver to other apps called com.innogames.core.frontend.notifications.receivers.LocalNotificationBroadcastReceiver. The purpose of this broadcast receiver is to show an in-game push notification to the player. However, the...

Oracle MySQL Server Authorization Issues Vulnerability

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. An authorization issue vulnerability exists in Oracle MySQL Server Server: PS version 8.0.21 and earlier versions that could allow a highly privilege...

Oracle Solaris Kernel License Issue Vulnerability

Oracle Solaris is a UNIX operating system from Oracle. Oracle Solaris Kernel version 11 contains an authorization issue vulnerability that can be exploited by a low-privileged attacker to compromise Oracle Solaris by logging in to Oracle Solaris and executing its infrastructure...

CVE-2020-26183

Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability. Certain remote users with low privileges may exploit this vulnerability to perform 'nsrmmdbd' operations in an unintended manner...

Authorization

Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability. Certain remote users with low privileges may exploit this vulnerability to perform 'nsrmmdbd' operations in an unintended manner...

CVE-2020-26183

Dell EMC NetWorker versions before 19.3.0.2 have an improper authorization vulnerability that allows certain remote users with low privileges to perform unintended nsrmmdbd operations. The affected software is Dell EMC NetWorker; root cause is improper authorization, enabling information exposure...

CVE-2020-12503 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products

Improper Authorization vulnerability of Pepperl+Fuchs P+F Comtrol RocketLinx ES7510-XT, ES8509-XT, ES8510-XT, ES9528-XTv2, ES7506, ES7510, ES7528, ES8508, ES8508F, ES8510, ES8510-XTE, ES9528/ES9528-XT all versions and ICRL-M-8RJ45/4SFP-G-DIN, ICRL-M-16RJ45/4CP-G-DIN FW 1.2.3 and below is prone to...

CVE-2020-9090

FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with other privilege can execute the command to exploit this vulnerability. This may compromise normal service of the affected product...

Security Advisory - Improper Authorization Vulnerability in Huawei Product

There is an improper authorization vulnerability in some Huawei products. A command is authorized with incorrect privilege. Attackers with other privilege can execute the command to exploit this vulnerability. This may compromise normal service of the affected product. Vulnerability ID:...

Authorization Bypass

tcpflow is vulnerable to authorization bypass. The vulnerability exists through an integer overflow in the function handleprism during caplen processing, if the caplen is less than 144...

IBM Security Guardium Insights Authorization Issues Vulnerability

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. IBM Security Guardium Insights 2.0.1 suffers from an authorization issue vulnerability that can be exploited by an attacker to...

Philips SureSigns VS4 License Issue Vulnerability

The Philips SureSigns VS4 is a vital signs monitor used to monitor physiological parameters in patients. An authorization issue vulnerability exists in Philips SureSigns VS4 A.07.107 and earlier versions, which stems from the product's failure to properly validate a user's claimed identity, no...

CVE-2020-3412

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to create a scheduled meeting template that would belong to another user in their organization. The vulnerability is due to insufficient authorization enforcement for th...

Authorization

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1H563SP1C00,10.0.3.1H563SP21C233 have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device...

McAfee Data Loss Prevention ePO extension incorrect authorization vulnerability

McAfee Data Loss Prevention DLP ePO extension is a data security protection software. An incorrect authorization vulnerability exists in the McAfee Data Loss Prevention DLP ePO extension. Allows remote attackers can exploit the vulnerability to submit a special request that can change the...