CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability...

CVE-2020-4014

The /profile/deleteWatch.do resource in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to remove another user's watching settings for a repository via an improper authorization vulnerability...

CVE-2020-1831

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

CVE-2020-1797

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185C00E74R3P8 have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of digital balance function...

Authorization

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185C00E74R3P8 have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of digital balance function...

CVE-2020-1797

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185C00E74R3P8 have an improper authorization vulnerability. The system does not properly restrict certain operation in ADB mode, successful exploit could allow certain user break the limit of digital balance function...

CVE-2020-1797

CVE-2020-1797 affects Huawei Mate 20 devices running versions earlier than 10.0.0.185 (C00E74R3P8). The issue is an improper authorization in ADB mode where the system does not properly restrict certain operations, potentially allowing a user to bypass limits on digital balance functions. Public ...

Authorization

Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating specific parameters within the application...

Authorization

A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file. This vulnerability can be leveraged to obfuscate an ongoing attack or fabricate log entries in the ms.log fil...

SAP Identity Management Information Disclosure Vulnerability (CNVD-2020-74932)

SAP Identity Management is a suite of identity management applications from SAP that can be embedded into business processes. A security vulnerability exists in SAP Identity Management version 8.0 that stems from a lack of authorization checks. An attacker could exploit the vulnerability to view...

F5 NGINX Controller Authorization Issues Vulnerability

F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5. The platform supports the management of multiple NGINX instances using a visual interface. An authorization issue vulnerability exists in F5 NGINX Controller versions 3.0.0 through 3.3.0, which stems from t...

Cisco Adaptive Security Appliances Software Licensing Issues Vulnerability

Cisco Adaptive Security Appliances Software ASA Software is a set of firewalls and network security platforms from the U.S. company Cisco Cisco. The platform provides highly secure access to data and network resources and other features. An authorization issue vulnerability exists in Cisco ASA...

Red Hat Keycloak Authorization Issues Vulnerability

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An authorization issue vulnerability exists in Red Hat Keycloak versions 8.0.2 and 9.0.0. An attacker could exploit the vulnerability to remove...

Subrion CMS Authorization Issues Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. An authorization issue vulnerability exists in Subrion CMS version 4.2.1. The vulnerability stems from a lack of...

Red Hat WildFly Elytron License Issue Vulnerability

Red Hat WildFly Elytron is a security framework for application servers from Red Hat USA. The product supports features such as configuring administrative access to servers. An authorization issue vulnerability exists in Red Hat WildFly Elytron 1.11.3.Final and prior versions. The vulnerability...

CVE-2020-5566

Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'...

CVE-2020-5566

Cybozu Garoon 4.0.0–4.10.3 contains an improper authorization vulnerability (CWE-285) that allows remote authenticated attackers to alter data via the E-mail and Messages applications. Affected component: Cybozu Garoon core with access to E-mail and Messages; root cause is improper authorization ...

Authorization

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

ABB System 800xA Base License Issue Vulnerability

ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. An authorization issue vulnerability exists in ABB System 800xA Base. An attacker could use this vulnerability to read and modify registry settings related to control system...

McAfee Endpoint Security Authorization Issues Vulnerability

McAfee Endpoint Security ENS is the United States McAfee McAfee company's set of framework for providing intelligent collaboration and advanced threat defense. The framework supports the entire threat defense lifecycle of real-time communications control and actionable threat forensics and so on...