CVE-2020-9933

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to read sensitive location information...

CVE-2020-9933

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.6 and iPadOS 13.6, tvOS 13.4.8, watchOS 6.2.8. A malicious application may be able to read sensitive location information...

CVE-2020-9933

CVE-2020-9933 relates to an authorization issue in Apple’s GeoServices component that could allow a malicious app to read sensitive location information. The vulnerability affects multiple Apple platforms (iOS, iPadOS, tvOS, watchOS) and is addressed by state-management improvements, with patches...

PT-2020-20876 · Apple · Ios +3

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.6 iPadOS versions prior to 13.6 tvOS versions prior to 13.4.8 watchOS versions prior to 6.2.8 Description: An authorization issue was addressed with improved state management. A malicious application may be able to re...

Apache Hadoop Authorization Issues Vulnerability

Apache Hadoop is the United States Apache Apache Software Foundation's set of open source distributed systems infrastructure. Apache Hadoop suffers from an authorization issue vulnerability that stems from a vulnerability in the web interface when Kerberos authentication is enabled and HTTP SPNEG...

PT-2020-13475 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 13.2.10 GitLab versions prior to 13.3.7 GitLab versions prior to 13.4.2 Description: The issue is related to improper authorization checks in GitLab, allowing a non-member of a project or group to modify the...

GitLab Authorization Issues Vulnerability (CNVD-2020-57831)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab versions prior ...

Alfresco Authorization Issues Vulnerability

Alfresco is an open source enterprise content management system. The platform page using Freemarker development , the main features include document management , collaboration , records management , knowledge base management , Web content management and so on. A vulnerability exists in Alfresco...

CloudBees Jenkins P4 Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . P4 Plugin is used in one of the Perforce...

SCADAPack Remote Connect Authorization Issues Vulnerability

SCADAPack is a Schneider-electric intelligent field controller that combines the monitoring and communication capabilities of a Remote Terminal Unit RTU with the processing and data logging capabilities of a Programmable Logic Controller PLC to provide superior functionality for remote processes...

Cisco Meetings App Authorization Issues Vulnerability

Cisco Meetings App is a video conferencing application from Cisco USA. An authorization issue vulnerability exists in the API subsystem in Cisco Meetings App, which stems from a flaw in the protection mechanism for TURN server credentials. A remote attacker can exploit this vulnerability by...

Cisco Data Center Network Manager Authorization Issues Vulnerability (CNVD-2020-50150)

Cisco Data Center Network Manager DCNM is a data center management system from Cisco. The system works with Cisco Nexus and MDS series switches and provides storage visualization, configuration and troubleshooting. An authorization issue vulnerability exists in the Web management interface in Cis...

Red Hat Wildfly License Issue Vulnerability

Red Hat Wildfly is the United States Red Hat Red Hat a lightweight JavaEE-based open source application server . wildfly-security-manager is a Wildfly security manager . An authorization issue vulnerability exists in Red Hat Wildfly products. The vulnerability stems from a lack of authentication...

CVE-2020-3413

A vulnerability in the scheduled meeting template feature of Cisco Webex Meetings could allow an authenticated, remote attacker to delete a scheduled meeting template that belongs to another user in their organization. The vulnerability is due to insufficient authorization enforcement for request...

IBM Event Streams Authorization Issues Vulnerability

IBM Event Streams is a set of event streaming platform based on Apache Kafka project from IBM, USA. The platform is mainly used for Apache Kafka deployment, authentication and encrypted communication and other functions. An authorization issue vulnerability exists in the schema registry in IBM...

CloudBees Jenkins Pipeline Maven Integration Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/test project and some timed tasks . Pipeline Maven Integration Plugin is used ...

Ubuntu License Issues Vulnerabilities

Ubuntu is a set of GNU/Linux operating systems for desktop applications from the British company Canonical and Ubuntu. An authorization issue vulnerability exists in trust-store in Ubuntu. An attacker could exploit this vulnerability to access restricted locations...

Cisco Webex Meetings Scheduled Meeting Template Creation Vulnerability

Cisco Webex Meetings provides affordable enterprise virtual meeting solutions. A scheduled meeting template creation vulnerability exists in Cisco Webex Meetings versions prior to 40.7.0. The vulnerability stems from insufficient execution of authorization for scheduled meeting template creation...

Cisco SD-WAN vManage Software License Issue Vulnerability (CNVD-2020-44061)

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the web management interface in Cisco SD-WAN vManage Software. A remote attacker could exploit this vulnerability with a...

Cisco SD-WAN vManage Software License Issue Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. An authorization issue vulnerability exists in the CLI in Cisco SD-WAN vManage Software that stems from insufficient input validation. A local attacker can exploit the...