Lucene search
+L

2 matches found

OSV
OSV
•added 2022/12/01 12:00 a.m.•36 views

ASB-A-170646036

In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.8AI score0.00154EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/15 12:00 a.m.•3 views

CVE-2022-20124: Undefined Security Weakness

In deletePackageX of DeletePackageHelper.java, there is a possible way for a Guest user to reset pre-loaded applications for other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.4AI score0.00154EPSS
SaveExploits0References1
Rows per page
Query Builder