User can copy folder that contain files that are blocked by the files access control

None...

PT-2024-32000

Name of the Vulnerable Software and Affected Versions ZONECENTRAL for Windows versions up to 2024.3 ZONECENTRAL for Windows versions up to Q.2021.2 Description The issue allows other users to access dedicated folders of ZONECENTRAL for Windows, potentially misusing technical files and making them...

CVE-2024-52514: Improper Access Control

Nextcloud Server is a self hosted personal cloud system. After a user received a share with some files inside being blocked by the files access control, the user would still be able to copy the intermediate folder inside Nextcloud allowing them to afterwards potentially access the blocked files...

Landray EKP path traversal vulnerability

Landray EKP is an office automation solution from China's Landray Corporation that enables companies to easily model and manage their business. A path traversal vulnerability exists in Landray EKP V16.0 and earlier versions, which stems from the parameter folder in the file...

PRIMX ZONECENTRAL security vulnerabilities

PRIMX ZONECENTRAL is an application from PRIMX, Inc. uses encryption to provide confidentiality services that apply to all documents in an organization. A security vulnerability exists in PRIMX ZONECENTRAL version 2024.3 and earlier and Q.2021.2 and earlier, which stems from the fact that a...

ZONEPOINT security vulnerabilities

PRIMX ZONEPOINT is a secure encrypted messaging program from PRIMX Corporation. A security vulnerability exists in ZONEPOINT 2024.1 and earlier versions, which stems from the fact that a dedicated folder can be accessed by other users by default, allowing them to misuse technical files and perfor...

PT-2024-31997

Name of the Vulnerable Software and Affected Versions ZEDMAIL for Windows versions up to 2024.3 Description The issue allows other users to access dedicated folders of ZEDMAIL for Windows by default, potentially misusing technical files and making them perform tasks with higher privileges...

PRIMX ORIZON security vulnerabilities

PRIMX ORIZON is a multi-platform software from PRIMX Corporation that encrypts files and folders stored at a cloud service provider. A security vulnerability exists in PRIMX ORIZON version 2024.3 and earlier, which stems from the fact that by default dedicated folders can be accessed by other use...

CVE-2024-46463

The PRIMX ORIZON software for Windows, version 2024.3 and earlier , contains a security vulnerability where dedicated folders are accessible by other users by default. This oversight allows for the misuse of technical files to perform tasks with higher privileges . To remediate this vulnerability...

PT-2024-31999

Name of the Vulnerable Software and Affected Versions CRYHOD for Windows versions up to 2024.3 Description The issue allows other users to access dedicated folders of CRYHOD for Windows by default, potentially misusing technical files and making them perform tasks with higher privileges...

CVE-2024-46465

The PRIMX CRYHOD software for Windows, version 2024.3 and earlier , contains a security vulnerability where dedicated folders are accessible by other users by default. This flaw allows for the misuse of technical files to perform tasks with higher privileges . Remediation requires modifying the C...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15-beta-1) +2 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...

Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (>=2.3, <=2.4), org.jenkins-ci.plugins:github-organization-folder (>=1.5, <=1.6) +1 more potentially affected by CVE-2024-52550 via org.jenkins-ci.plugins.workflow:workflow-cps (2.14)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps-global-lib =2.3, =1.5, =1.6...

CVE-2024-52554

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

CVE-2024-52554

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

CVE-2024-52554

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

CVE-2024-52554

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...

CVE-2024-52554

The Jenkins Shared Library Version Override Plugin (version 17.v786074c9fce7 and earlier) contains a script security bypass vulnerability. The root cause is that folder-scoped library overrides are incorrectly declared as trusted, causing them to bypass the Script Security sandbox . An attacker w...

CVE-2024-52554

Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to configure a folder-scoped library override...