CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

Authorization

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

CVE-2023-32357

An authorization issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may be able to retain access to system configuration files even after its permissio...

Knowage 授权问题漏洞

Knowage is an open source suite for modern business analytics on legacy resources and big data systems from Knowage Italy. An authorization issue vulnerability exists in Knowage versions prior to 6.0.0 to 8.1.8, which stems from an account authentication bypass issue...

fossbilling 授权问题漏洞

fossbilling is a free open source solution for efficient billing and customer management. An authorization issue vulnerability exists in versions prior to fossbilling 0.5.1 that stems from the presence of session fixing...

CVE-2023-32357

CVE-2023-32357 is an authorization issue affecting Apple platforms. The root cause is improved state management that prevents proper revocation of access, allowing an app to retain access to system configuration files after permissions are revoked. Affected products include watchOS, tvOS, and var...

Dell BIOS 授权问题漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA. Dell BIOS has an authorization issue vulnerability that stems from incorrect authentication. An attacker could exploit the vulnerability to elevate system privileges...

Tauri 授权问题漏洞

Tauri is a Tauri open source for building smaller, faster, and more secure desktop applications using a web front end. Tauri version 1.4.0 has an authorization issue vulnerability that stems from a regression that includes a file system range check on Unix uppoint files...

Mattermost Authorization Issues Vulnerability (CNVD-2023-55046)

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an authorization issue vulnerability that arises from not properly checking permissions when executing commands, which could be exploited by an unauthorized attacker to distribu...

Apache Accumulo 授权问题漏洞

Apache Accumulo is a reliable, scalable, high-performance sorted distributed Key-Value storage application from the Apache Foundation USA. An authorization issue vulnerability exists in Apache Accumulo version 2.1.0 that stems from a flaw in the user authentication process, which may succeed when...

Doorkeeper 授权问题漏洞

Doorkeeper is an OAuth 2 authentication provider for Rails/Grape applications. An authorization issue vulnerability exists in Doorkeeper versions prior to 5.6.6, which stems from the automatic processing of authorization requests from previously approved public clients that do not require user...

Froxlor 授权问题漏洞

Froxlor is a lightweight server management software from the Froxlor team. An authorization issue vulnerability exists in versions of Froxlor prior to 2.1.0 that stems from session fixing...

Mozilla Firefox License Issues Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An authorization issue vulnerability exists in versions of Mozilla Firefox prior to version 109, which stems from a failure to store per-source notification permissions in a way that takes into account...

Authorization

The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rxsetscreenoptions' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their...

Matrix Synapse 授权问题漏洞

Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the UK. An authorization issue vulnerability exists in versions of Matrix Synapse prior to 1.85.0, which stems from the possibility that a deactivated user may log in while using an uncommon configuration...

PT-2023-14904 · Sguda · Sguda U-Lock

Name of the Vulnerable Software and Affected Versions: SGUDA U-Lock central lock control service affected versions not specified Description: The issue is related to incorrect authorization in the lock management function of the SGUDA U-Lock central lock control service. A remote attacker with...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An authorization issue vulnerability exists in versions of Mozilla Firefox prior to version 109, which stems from a failure to store per-source notification permissions in a way that takes into account...

Student Management System 授权问题漏洞

Student Management System is a simple web-based student management software from Sk.Amir Hamza, an individual developer in Bangladesh. An authorization issue vulnerability exists in Student Management System version 1.0, which stems from an incorrect manipulation of the parameter sid that can lea...

OpenEMR 授权问题漏洞

OpenEMR is an open source medical management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An authorization issue vulnerability previously existed in OpenEMR version 7.0.1. ...