CVE-2024-0551 Download and export of file via default user role

Enable exports of the database and associated exported information of the system via the default user role. The attacked would have to have been granted access to the system prior to the attack. It is worth noting that the deterministic nature of the export name is lower risk as the UI for...

PT-2020-18156

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Insights version 2.0.1 Description The issue arises because IBM Security Guardium Insights performs an operation at a higher privilege level than necessary, potentially creating new weaknesses or amplifying existing ones...

Privilege Escalation

cfme is vulnerable to privilege escalation attacks. The vulnerability exists as a logic error in validrole in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an...