PT-2023-18447 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.1.0p28 Checkmk versions prior to 2.2.0b8 Description: The issue concerns improper authorization in the RestAPI of Checkmk, allowing remote authenticated users to read arbitrary host configs. Recommendations: For...

OTRS 8.0.x < 8.0.32 Information Disclosure / DoS Vulnerability (OSA-2023-03)

OTRS is prone to a information disclosure and denial of service DoS vulnerability via websocket push events. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2023-21650 · Unknown · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 6.0 Description: An improper authorization issue exists that could allow a hacker to manipulate the rid parameter and change the updateMessage method, which only checks whether the user is allowed to edit a messa...

Rocket.Chat 授权问题漏洞

Rocket.Chat is an open source team chat software. A security vulnerability exists in versions prior to Rocket.Chat 6.0 that stems from improper authorization and allows an attacker to manipulate the parameter rid to change certain methods...

CVE-2023-28325

Summary: CVE-2023-28325 affects Rocket.Chat versions prior to 6.0, where an improper authorization issue allows manipulating the rid parameter to alter the behavior of the updateMessage method, which only checks if a user is allowed to edit messages in a target room. What is vulnerable: The updat...

CVE-2023-28325

An improper authorization vulnerability exists in Rocket.Chat 6.0 that could allow a hacker to manipulate the rid parameter and change the updateMessage method that only checks whether the user is allowed to edit message in the target room...

CVE-2022-45128

Improper authorization in the IntelR EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-43465

Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

Authorization

Improper authorization in the IntelR EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access...

Authorization

Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-43465

Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-45128

Improper authorization in the IntelR EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-43465

Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-14217 · Intel · Intel Scs

Name of the Vulnerable Software and Affected Versions: IntelR SCS software affected versions not specified Description: The issue is related to improper authorization in the IntelR SCS software, which may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-13995 · Intel · Intel Mc +1

Name of the Vulnerable Software and Affected Versions: IntelR EMA Configuration Tool versions prior to 1.0.4 IntelR MC versions prior to 2.4 Description: The issue is related to improper authorization, which may allow an authenticated user to potentially enable denial of service via local access...

Intel EMA software 安全漏洞

Intel EMA software is an application from Intel Corporation USA. A security vulnerability exists in Intel EMA software prior to version 1.9.0.0, which arises from improper authorization and could allow an authenticated user to potentially enable denial of service via local access...

Intel® EMA Configuration Tool and Intel® MC Software Advisory

Summary: A potential security vulnerability in Intel® Endpoint Management Assistant EMA Configuration Tool and Intel® Manageability Commander MC software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID:...