CVE-2019-0257

Customizing functionality of SAP NetWeaver AS ABAP Platform fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0257

Customizing functionality of SAP NetWeaver AS ABAP Platform fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0258

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

Authorization

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0258

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0257

Customizing functionality of SAP NetWeaver AS ABAP Platform fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0258

CVE-2019-0258 affects SAP Disclosure Management, version 10.01. The vulnerability arises from insufficient authorization checks for an authenticated user, leading to privilege escalation. The public sources in the connected set describe this issue for the SAP Disclosure Management product but do ...

Information Leakage

Apache Hadoop HDFS is vulnerable to information leakage. When listXAttrs is used, the library misses the authorization checks for path-level read permissions, leaking extended attribute key/value pairs...

CVE-2018-2484

SAP Enterprise Financial Services fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.6320 does not perform necessary authorization checks for an authenticated user, resulting in escalation of...

CVE-2019-0243

Under some circumstances, masterdata maintenance in SAP BW/4HANA fixed in DW4CORE version 1.0 SP08 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0243

CVE-2019-0243 affects SAP BW/4HANA: masterdata maintenance can skip authorization checks for an authenticated user, enabling privilege escalation. Vulnerable component is masterdata maintenance in SAP BW/4HANA; fixed in DW4CORE version 1.0 (SP08). The issue implies unauthorized elevation of privi...

CVE-2019-0243

Under some circumstances, masterdata maintenance in SAP BW/4HANA fixed in DW4CORE version 1.0 SP08 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2018-2484

SAP Enterprise Financial Services fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.6320 does not perform necessary authorization checks for an authenticated user, resulting in escalation of...

CVE-2018-15780

RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information...

CVE-2018-15780 DSA-2018-224: RSA Archer GRC Platform Improper Access Control Vulnerability

RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information...

CVE-2018-17950

Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2...

CVE-2018-17950

CVE-2018-17950: Affects NetIQ eDirectory prior to version 9.1 SP2. The issue is an authorization check error where checks are not enforced correctly, enabling potential integrity impact (I = HIGH) without credentials over a network (attack vector: NETWORK, complexity: LOW). The NVD metrics descri...

CVE-2018-17950

Incorrect enforcement of authorization checks in eDirectory prior to 9.1 SP2...

CVE-2018-2494

Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP NetWeaver 700 to 750, from 750 onwards delivered as ABAP Platform...

MGASA-2018-0414 Updated blueman packages fix security vulnerability

Flawed polkit authorization checks in blueman allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication boo1083066...