6 matches found
CVE-2026-119663
Tamery formerly Conar 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' connections. Attackers owning one connection can include a victim's connectionId i...
CVE-2026-119663 Tamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create
Tamery formerly Conar 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' connections. Attackers owning one connection can include a victim's connectionId i...
CVE-2026-119663
The cloud sync API in Tamery (formerly Conar) versions 0.32.0 before 0.99.0 is vulnerable to a broken authorization flaw in the connectionsResources.create handler. This vulnerability allows authenticated users to attach resources to connections owned by other users. Specifically, an attacker who...
EUVD-2026-114079
Tamery formerly Conar 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' connections. Attackers owning one connection can include a victim's connectionId i...
PT-2026-133593
Tamery formerly Conar 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' connections. Attackers owning one connection can include a victim's connectionId i...
CVE-2026-119663: wannabespace tamery: Tamery (formerly Conar) 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API…
Tamery formerly Conar 0.32.0 before 0.99.0 contains a broken authorization vulnerability in the cloud sync API connectionsResources.create handler that allows authenticated users to attach resources to other users' connections. Attackers owning one connection can include a victim's connectionId i...