CVE-2024-25949

Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges...

CVE-2024-2433

CVE-2024-2433 describes an improper authorization vulnerability in Palo Alto Networks Panorama software where an authenticated read-only administrator can upload files via the web interface and fill a disk partition, leading to availability loss by blocking web login and PAN-OS downloads. Affecte...

PT-2024-20652 · Dell · Dell Secure Connect Gateway (Scg) Policy Manager

Name of the Vulnerable Software and Affected Versions: Dell Secure Connect Gateway SCG Policy Manager, all versions Description: The issue is related to an improper authorization vulnerability. An attacker with low privileges on an adjacent network could potentially exploit this, leading to...

GitLab 14.7 < 16.3.6 / 16.4.0 < 16.4.2 / 16.5.0 < 16.5.1 (CVE-2023-4700)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An authorization issue affecting GitLab EE affecting all versions from 14.7 prior to 16.3.6, 16.4 prior to 16.4.2, and 16.5 prior to 16.5.1, allowed a user to run jobs in protected environments,...

CVE-2023-28055

Dell NetWorker, Version 19.7 has an improper authorization vulnerability in the NetWorker client. An unauthenticated attacker within the same network could potentially exploit this by manipulating a command leading to gain of complete access to the server file further resulting in information...

CVE-2023-21461

The CVE-2023-21461 entry concerns Samsung mobile devices with an improper authorization vulnerability in the Settings component AutoPowerOnOffConfirmDialog (before SMR Mar-2023 Release 1). The underlying issue allows a local attacker to turn the device off via an unprotected activity. Documented ...

Authorization

A CWE-285: Improper Authorization vulnerability exists that could cause unauthorized access to certain software functions when an attacker gets access to localhost interface of the EcoStruxure Power Commission application. Affected Products: EcoStruxure Power Commission Versions prior to V2.25...

CVE-2022-2661

CVE-2022-2661 affects Sequi PortBloque S (serial Modbus firewall) and is an improper authorization vulnerability (CWE-285) that may allow a low-privileged user to perform administrative functions via specially crafted requests. Public sources describe the product as affected across versions and i...

CVE-2022-26857

Dell OpenManage Enterprise Versions 3.8.3 and prior contain an improper authorization vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass blocked functionalities and perform unauthorized actions...

CVE-2021-36029

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution...

CVE-2021-28799 Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

CVE-2021-28799

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

Atlassian Jira < 8.5.5 / 8.6.x < 8.7.2 / 8.8.x < 8.8.1 Improper authorization

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.5, or version 8.6.x prior to 8.7.2, 8.8.x prior to 8.8.1. It is, therefore, affected by a Improper authorization vulnerability. It allow remote attackers to enumerate...

CVE-2020-4029

CVE-2020-4029 – Atlassian Jira Server/Data Center suffers an improper authorization flaw in the REST endpoint /rest/project-templates/1.0/createshared that lets remote attackers enumerate project names. Affected versions are Jira Server/Data Center before 8.5.5; Jira 8.6.0 to 8.7.2; and Jira 8.8....

CVE-2020-1831

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195SP31C00E74R3P8 have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance...

CVE-2020-1797

CVE-2020-1797 affects Huawei Mate 20 devices running versions earlier than 10.0.0.185 (C00E74R3P8). The issue is an improper authorization in ADB mode where the system does not properly restrict certain operations, potentially allowing a user to bypass limits on digital balance functions. Public ...

Authorization

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

CVE-2020-1796

There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI...

CVE-2019-15009

The CVE-2019-15009 issue affects Atlassian Fisheye and Crucible before version 4.8.0. The vulnerability is an improper authorization flaw in the /json/profile/removeStarAjax.do resource, which allowed remote attackers to remove another user’s favourite setting for a project. Affected components i...

CVE-2019-3764

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive...