Zammad is vulnerable to authorization issues

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from an authorization issue vulnerability that can be exploited by an attacker to register a new account using an email address that contains a non-existent domain of an existing organization, which in turn can be...

Zammad has an authorization problem vulnerability (CNVD-2021-22174)

Zammad is a Web-based open source helpdesk/customer support system. Zammad suffers from an authorization issue vulnerability that can be exploited by an attacker to access recent tickets, merge tickets, and split ticket functionality...

Apache TomEE Authorization Issues Vulnerability

Apache TomEE is the United States Apache Software Apache Software Foundation of a lightweight Java EE application server . An authorization issue vulnerability exists in Apache TomEE. An attacker can exploit the vulnerability by sending a specially crafted request using the 'useJMX=true' paramete...

F5 NGINX Controller Authorization Issue Vulnerability (CNVD-2020-51553)

F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5. The platform supports the management of multiple NGINX instances using a visual interface. An authorization issue vulnerability exists in F5 NGINX Controller versions 3.0.0 through 3.4.0 in NGINX Controller...

CVE-2020-9848

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

CVE-2020-9848

CVE-2020-9848 affects Apple iOS/iPadOS notifications: an authorization issue fixed in iOS 13.5 / iPadOS 13.5 due to improved state management. A person with physical access to an iOS device could potentially view notification contents from the lockscreen. The issue is documented across multiple s...

PT-2020-20803 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 13.5 iPadOS versions prior to 13.5 Description: An authorization issue was addressed with improved state management, allowing a person with physical access to an iOS device to potentially view notification contents from...

CloudBees Jenkins Project Inheritance Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Project Inheritance Plugin is used in one of...

Codeorigin Sysax Multi Server Authorization Issues Vulnerability

Codeorigin Sysax Multi Server is an FTP File Transfer Protocol server and Shell server for Windows from Codeorigin USA. An authorization issue vulnerability exists in Codeorigin Sysax Multi Server version 6.90. The vulnerability can be exploited by an attacker to access other user sessions with t...

Huawei Mate 20 License Issue Vulnerability (CNVD-2020-31280)

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in ADB mode in previous versions of Huawei Mate 20 10.0.0.185 C00E74R3P8, which stems from the system's failure to appropriately restrict a user from performing an action in ADB mode. An...

Huawei Mate 20 License Issue Vulnerability (CNVD-2020-31279)

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. An authorization issue vulnerability exists in previous versions of Huawei Mate 20 10.0.0.195 SP31C00E74R3P8, which stems from the Healthy Use of Phone feature not adequately limiting the user's usage hours. An attacker can exploi...

Red Hat Ceph Authorization Issues Vulnerability

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system based on POSIX Portable Operating System Interface without a single point of failure, so that data can be fault-tolerant and seamless replication...

rConfig Authorization Issues Vulnerability

rConfig is an open source network configuration management utility . An authorization issue vulnerability exists in rConfig version 3.9.4. An attacker could exploit this vulnerability to access other user sessions...

Multiple NETGEAR Product License Issue Vulnerabilities (CNVD-2020-33662)

NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 and others are a wireless WiFi device from NETGEAR. NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 version 2.5.1.106, Outdoor Satellite RBS50Y version 2.5.1.106 and Pro Tri-Band Business WiFi An authorization iss...

Palo Alto Networks PAN-OS Authorization Issue Vulnerability (CNVD-2020-41540)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An authorization issue vulnerability exists in the Panorama context switching feature of Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability by accessing the Panorama...

Palo Alto Networks PAN-OS Authorization Issue Vulnerability (CNVD-2020-41538)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An authorization issue vulnerability exists in GlobalProtect Portal in Palo Alto Networks PAN-OS. The vulnerability stems from a lack of authentication measures or insufficient...

SAP Adaptive Server Enterprise Authorization Issues Vulnerability

SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. SAP Adaptive Server Enterprise has an authorization issue vulnerability that stems from a lack of authorization checking. An attacker could exploit the vulnerability to access information...

Zoho ManageEngine DataSecurity Plus Authorization Issues Vulnerability

Zoho ManageEngine DataSecurity Plus is a sensitive data management solution from Zoho USA. The product features data leakage prevention, data risk assessment and file server auditing. Zoho ManageEngine DataSecurity Plus suffers from an authorization issue vulnerability that arises when the progra...

CloudBees Jenkins Amazon EC2 Plugin Authorization Issues Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. CloudBees. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Amazon EC2 Plugin is used in which an EC2 connection agen...

Huawei AR3200 Authorization Issue Vulnerability

The Huawei AR3200 is an enterprise router from Huawei China. An authorization issue vulnerability exists in the Huawei AR3200, which can be exploited by an attacker to gain partial privileges on the device...