CVE-2024-21761

FortiPortal suffers an improper authorization vulnerability (CWE-285) affecting FortiPortal versions 7.0.6 and below and 7.2.0. An attacker could download reports from other organizations by modifying the request payload. The issue is documented across multiple sources, with practical remediation...

CVE-2024-21761

An improper authorization vulnerability CWE-285 in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload...

CVE-2024-21761

An improper authorization vulnerability CWE-285 in FortiPortal version 7.2.0, and versions 7.0.6 and below reports may allow a user to download other organizations reports via modification in the request payload...

HID Global Encoders

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Exploitable locally Vendor : HID Global Equipment : iCLASS SE, OMNIKEY Vulnerability : Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read data from reader configuration...

Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center

CVE-2023-22518 Lỗ hổng Phân Quyền Không Chính Xác trong Conflu...

CVE-2023-41673

An improper authorization vulnerability CWE-285 in Fortinet FortiADC version 7.4.0 and before 7.2.2 may allow a low privileged user to read or backup the full system configuration via HTTP or HTTPS requests...

CVE-2023-41673

Fortinet FortiADC is affected by an improper authorization vulnerability (CWE-285) that could allow a low-privileged user to read or back up the full system configuration via HTTP(S) requests. Affected products and versions in the provided documents include FortiADC versions 7.4.0 and earlier, wi...

Authorization

An improper authorization vulnerability CWE-285 in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests...

CVE-2023-36633

CVE-2023-36633 affects Fortinet FortiMail webmail (versions 7.2.0–7.2.2 and prior to 7.0.5). The issue is an improper authorization (CWE-285) that allows an authenticated attacker to see and modify the title of other users’ address book folders via crafted HTTP/HTTPS requests. Impact is limited t...

Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center

CVE-2023-22518 Improper Authorization Vulnerability in Conflue...

Authorization

EisBaer Scada - CWE-285: Improper Authorization...

CVE-2023-42491 EisBaer Scada - CWE-285: Improper Authorization

EisBaer Scada - CWE-285: Improper Authorization...

CVE-2023-42491

CVE-2023-42491 concerns EisBaer Scada with an issue described as CWE-285: Improper Authorization. The NVD entry lists a network-based, high-impact vulnerability (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8, critical). The CNA score also indicates a network vector with low attack...

CVE-2023-42491 EisBaer Scada - CWE-285: Improper Authorization

EisBaer Scada - CWE-285: Improper Authorization...

Protect

An improper authorization vulnerability CWE-285 in FortiOS's WEB UI component may allow an authenticated attacker belonging to the prof-admin profile to perform elevated actions...

Oracle Linux 7 : mercurial (ELSA-2019-2276)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2276 advisory. - Add missing hunk for CVE-2018-13347 patch - Related: CVE-2018-13347 Tenable has extracted the preceding description block directly from the Oracle...

JVN#83334799: Multiple vulnerabilities in Special Interest Group Network for Analysis and Liaison's API

Special Interest Group Network for Analysis and Liaison's "Inter-SOC Cooperation API" provided by Japan Computer Emergency Response Team Coordination Center JPCERT/CC contains multiple vulnerabilities listed below. Improper Authorization in Information Provision function CWE-285 - CVE-2023-38751...

Hitachi Energy MicroSCADA System Data Manager SDM600

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MicroSCADA System Data Manager SDM600 Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Improper Authorization, Improper Resource Shutdown or Release, Improper...

CVE-2022-38375

CVE-2022-38375 affects Fortinet FortiNAC: versions 9.4.0 through 9.4.1 and prior to 9.2.6 expose an improper authorization flaw (CWE-285) that allows an unauthenticated attacker to perform administrative operations via crafted HTTP POST requests. Root cause is improper authorization leading to el...

FortiWeb - Unauthorized Configuration Download Vulnerability

An unauthorized configuration download vulnerability CWE-285 in FortiWeb may allow a local attacker to access confidential configuration files via a crafted http request...