PT-2024-39869

Name of the Vulnerable Software and Affected Versions Chef Habitat builder-api versions prior to habitat/builder-api/10315/20240913162802 Description The issue allows unauthorized deletion of personal tokens due to an indirect object reference IDOR flaw. This is specifically related to the...

CVE-2019-18181

In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only...