CVE-2020-6232

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media...

CVE-2020-6232

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media...

Authorization

SAP S/4 HANA Financial Products Subledger and Banking Services, versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization Check, resulting in slowing the system...

CVE-2018-10865

It has been discovered that redhat-certification does not perform an authorization check and allows an unauthenticated user to call a "restart" RPC method on any host accessible by the system. An attacker could use this flaw to send requests to port 8009 of any host or to keep restarting the...

CVE-2020-6232

CVE-2020-6232 affects SAP Commerce versions 1811 and 1905. Root cause: missing authorization checks for anonymous users; impact is confidentiality of secure media. Connected documents confirm the same details; exploitation methods, affected fixes, or mitigations are not provided in the supplied m...

CVE-2020-6232

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media...

CVE-2020-6233

SAP S/4 HANA Financial Products Subledger and Banking Services, versions - FSAPPL 400, 450, 500 and S4FPSL 100, allows an authenticated user to run an analysis report due to Missing Authorization Check, resulting in slowing the system...

CVE-2020-6233

SAP S/4 HANA (Financial Products Subledger and Banking Services) vulnerable to an authenticated user running an analysis report due to Missing Authorization Check. Affected versions: FSAPPL 400, 450, 500 and S4FPSL 100. Impact described as system slowdown (availability impact). Root cause is miss...

SUSE SLED15 / SLES15 Security Update : postgresql10 (SUSE-SU-2020:0752-1)

This update for postgresql10 fixes the following issues : PostgreSQL was updated to version 10.12. Security issue fixed : CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. Note that Tenable Network Security has extracted the preceding description...

SUSE-SU-2020:0752-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: PostgreSQL was updated to version 10.12. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985...

Atlassian JIRA < 8.6.1 Information Disclosure

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is before 8.6.1. It is, therefore, affected by a missing authorization check that allows an authenticated remote attacker to view release version information in projects that they do not...

SUSE SLED12 / SLES12 Security Update : postgresql10 (SUSE-SU-2020:0715-1)

This update for postgresql10 fixes the following issues : PostgreSQL was updated to version 10.12. Security issue fixed : CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. Note that Tenable Network Security has extracted the preceding description...

SUSE-SU-2020:0715-1 Security update for postgresql10

This update for postgresql10 fixes the following issues: PostgreSQL was updated to version 10.12. Security issue fixed: - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985...

CVE-2020-1720

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issu...

CVE-2019-20407

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check...

Authentication flaw

The ConfigureBambooRelease resource in Jira Software and Jira Software Data Center before version 8.6.1 allows authenticated remote attackers to view release version information in projects that they do not have access to through an missing authorisation check...

CVE-2019-20407

CVE-2019-20407 affects Jira Software and Jira Software Data Center (ConfigureBambooRelease resource) prior to version 8.6.1. An authenticated remote attacker can view release version information in projects to which they should not have access due to a missing authorization check. The issue is do...

WordPress Plugin Custom Searchable Data System - Unauthenticated Data M]odification

Exploit Title: Wordpress Plugin Custom Searchable Data System - Unauthenticated Data modification Date: 13 March 2020 Exploit Author: Nawaf Alkeraithe Vendor Homepage: https://wordpress.org/plugins/custom-searchable-data-entry-system/ Software Link:...

openSUSE Security Update : postgresql10 (openSUSE-2020-331)

This update for postgresql10 fixes the following issues : PostgreSQL was updated to version 10.12. Security issue fixed : - CVE-2020-1720: Fixed a missing authorization check in the ALTER ... DEPENDS ON extension bsc1163985. This update was imported from the SUSE:SLE-15:Update update project. C...

CVE-2020-6204

The selection query in SAP Treasury and Risk Management Transaction Management EA-FINSERV?versions 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 returns more records than it should be when selecting and displaying the contract number, leading to Missing...