6164 matches found
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data...
Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
CVE-2023-22518 An Exploitation tool to exploit the confluence...
CVE-2023-5948
Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91...
CVE-2023-5948
CVE-2023-5948 affects teamamaze/amazefileutilities prior to version 1.91. The root cause is improper authorization in the repository logic. Public sources in the connected set describe an affected component and versions before 1.91, with remediation to update to 1.91 or later (as noted by PT-2023...
CVE-2023-5948 Improper Authorization in teamamaze/amazefileutilities
Improper Authorization in GitHub repository teamamaze/amazefileutilities prior to 1.91...
PT-2023-32436 · Teamamaze · Amazefileutilities
Name of the Vulnerable Software and Affected Versions: teamamaze/amazefileutilities versions prior to 1.91 Description: The issue is related to improper authorization. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...
VulnCheck KEV: CVE-2023-22518
Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data...
CVE-2023-22518
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perfo...
CVE-2023-22518
CVE-2023-22518 (Confluence DC/Server): An improper authorization vulnerability allowed an unauthenticated attacker to reset Confluence and create an instance administrator, enabling full admin control and potential data loss. Affected products include Confluence Data Center (all versions) and Con...
Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
CVE-2023-22518 Improper Authorization Vulnerability in Conflue...
Exploit for Incorrect Authorization in Atlassian Confluence_Data_Center
CVE-2023-22518 Improper Authorization Vulnerability in Conflue...
Atlassian Confluence < 7.19.16 / 8.x < 8.3.4 / 8.4.x < 8.4.4 / 8.5.x < 8.5.3 / 8.6.x < 8.6.1 (CONFSERVER-93142)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-93142 advisory. - Improper Authorization in Confluence Data Center and Server CVE-2023-22518 Note that Nessus has not tested for this issue but has instead relied...
Atlassian Confluence Unauth JSON setup-restore Improper Authorization leading to RCE (CVE-2023-22518)
This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator. This module...
Atlassian Confluence Data Center and Confluence Server Security Vulnerabilities
Atlassian Confluence Server is the server version of Atlassian Australia's suite of collaboration software with enterprise knowledge management capabilities and support for building enterprise WiKi. A security vulnerability exists in Atlassian Confluence Data Center and Confluence Server that ste...
CVE-2023-22518
All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perfo...
inure Security Vulnerabilities
inure is an elegant application manager for Android by the individual developer Hamza Rizwan. A security vulnerability exists in versions prior to inure Build95 that stems from improper application authorization and allows opening arbitrary files...
CVE-2023-42491
EisBaer Scada - CWE-285: Improper Authorization...
Authorization
EisBaer Scada - CWE-285: Improper Authorization...
CVE-2023-42491
CVE-2023-42491 concerns EisBaer Scada with an issue described as CWE-285: Improper Authorization. The NVD entry lists a network-based, high-impact vulnerability (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H; base score 9.8, critical). The CNA score also indicates a network vector with low attack...
