CVE-2021-33162

Improper access control in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-40071

CVE-2023-40071 refers to an improper access control vulnerability in Intel Graphics Performance Analyzers (GPA) software installers prior to 2023.3. An authenticated local user could potentially escalate privileges. The issue is associated with Intel GPA software/Framework before 2023.3, and Inte...

CVE-2023-40071

Improper access control in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-37410

Improper access control for some IntelR Thunderbolt driver software before version 89 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-43487

Improper access control in some IntelR CST before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-4263 Improper Access Control in mlflow/mlflow

A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing...

PT-2024-12838

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for macOS affected versions not specified Description: The issue is related to improper access control in IntelR Power Gadget software for macOS, which may allow an authenticated user to potentially enable...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget that stems from an improper access control issue. It could allow an authenticated user to escalate privileges via...

PT-2024-13132 · Intel · Intel(R) Gpa Framework

Name of the Vulnerable Software and Affected Versions: IntelR GPA Framework software versions prior to 2023.3 Description: The issue is related to improper access control in some IntelR GPA Framework software installers, which may allow an authenticated user to potentially enable escalation of...

Intel Ethernet Controller Administrative 安全漏洞

Intel Ethernet Controller Administrative is a tool from Intel Corporation USA. A security vulnerability exists in Intel Ethernet Controller Administrative prior to version 28.3 that stems from an improper access control issue. It could allow an authenticated user to escalate privileges via local...

PT-2024-13083 · Intel · Intel(R) Cst

Name of the Vulnerable Software and Affected Versions: IntelR CST versions prior to 2.1.10300 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior to...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool from Intel Corporation for Intel Core processors. A security vulnerability exists in Intel Power Gadget that stems from an improper access control issue. It could allow an authenticated user to escalate privileges via local...

Intel Thunderbolt DCH drivers 安全漏洞

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability exists in Intel Thunderbolt DCH drivers prior to version 89, which stems from an improper access control issue. It could allow an authenticated user to escalate privileges via local access...

Intel Consolidated Build Infrastructure 安全漏洞

Intel Consolidated Build Infrastructure is a comprehensive build infrastructure from Intel Corporation USA. A security vulnerability previously existed in Intel Consolidated Build Infrastructure version 2.1.10300, which stemmed from an improper access control issue. It could allow authenticated...

Siemens Polarion ALM Improper Access Control Vulnerability

Polarion ALM is an application lifecycle management solution that improves the software development process with a single unified solution for requirements, coding, testing and release. Siemens Polarion ALM suffers from an Improper Access Control vulnerability due to a lack of proper access contr...

Intel Ethernet Adapters 和 Intel Ethernet Controller I225 Manageability firmware 安全漏洞

Intel Ethernet Adapters and Intel Ethernet Controllers are products of Intel Corporation, USA. Intel Ethernet Adapters are Ethernet adapters. Intel Ethernet Controllers are Ethernet controllers. Intel Ethernet Controllers are an Ethernet controller. A security vulnerability exists in the Intel...

CVE-2024-3317

An improper access control was identified in the Identity Security Cloud ISC message server API that allowed an authenticated user to exfiltrate job processing metadata opaque messageIDs, work queue depth and counts for other tenants...

CVE-2024-3317 SailPoint Identity Security Cloud Improper Access Control

An improper access control was identified in the Identity Security Cloud ISC message server API that allowed an authenticated user to exfiltrate job processing metadata opaque messageIDs, work queue depth and counts for other tenants...

CVE-2024-3317 SailPoint Identity Security Cloud Improper Access Control

An improper access control was identified in the Identity Security Cloud ISC message server API that allowed an authenticated user to exfiltrate job processing metadata opaque messageIDs, work queue depth and counts for other tenants...

CVE-2024-3317

CVE-2024-3317 involves SailPoint Identity Security Cloud (ISC) message server API showing improper access control. An authenticated user can exfiltrate job processing metadata (opaque messageIDs, work queue depth and counts) for other tenants. This is described across multiple sources (NVD, Red H...