6128 matches found
GHSA-RJMQ-6V55-4RJV Improper Authorization in org.cometd.oort
Impact Internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may be able to watch cluster-internal traffic that contains other user's possibly sensitive data. By publishi...
Improper Authorization in org.cometd.oort
Impact Internal usage of Oort and Seti channels is improperly authorized, so any remote user could subscribe and publish to those channels. By subscribing to those channels, a remote user may be able to watch cluster-internal traffic that contains other user's possibly sensitive data. By publishi...
Gitea < 1.16.4 Improper Authorization Vulnerability
Gitea is prone to an improper authorization vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; yo...
Improper Authorization in Gogs
Impact Expired PAM accounts and accounts with expired passwords are continued to be seen as valid. Installations use PAM as authentication sources are affected. Patches Expired PAM accounts and accounts with expired passwords are no longer being seen as valid. Users should upgrade to 0.12.5 or th...
GHSA-MCG6-H362-CMQ5 Improper Authorization in cobbler
Impact If PAM is correctly configured and a user account is set to expired, the expired user-account is still able to successfully log into Cobbler in all places Web UI, CLI & XMLRPC-API. The same applies to user accounts with passwords set to be expired. Patches There is a patch for the latest...
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
PYSEC-2022-177
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
PYSEC-2022-177
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
UBUNTU-CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
CVE-2022-0860 Improper Authorization in cobbler/cobbler
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...
CVE-2022-0860
CVE-2022-0860 affects cobbler/cobbler prior to 3.3.2. The issue is described as Improper Authorization in the Cobbler repository, potentially enabling unauthorized access due to insufficient access controls. Connected documents (Ubuntu/SUSE/Nessus references) corroborate that this CVE is included...
CVE-2022-0821
Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...
Authorization
Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...
PT-2022-13535
Name of the Vulnerable Software and Affected Versions saleor versions prior to 3.1.2 Description The issue concerns a missing authorization in the saleor repository. This problem allows for improper authorization. Recommendations For versions prior to 3.1.2, update to version 3.1.2 or later to...
CVE-2022-0821
CVE-2022-0821 affects Orchard Core (orchardcore) prior to version 1.3.0. The issue is described as improper authorization in the GitHub repository orchardcms/orchardcore, enabling a low-privilege user to create roles (as shown by Huntr/Red Hat and CNVD records). This implies a privilege/authoriza...
PT-2022-13448 · Unknown · Orchardcore
Name of the Vulnerable Software and Affected Versions: orchardcore versions prior to 1.3.0 Description: The issue is related to improper authorization in the GitHub repository orchardcms/orchardcore. Recommendations: For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the iss...
Improper Authorization and possible DoS when using PAM Auth
Description When bareos versions after 18.2 are build and configured for PAM authentification it skips checking authorization completely. Expired accounts and accounts with expired passwords can still login. Further after wrong authentication or the code returns without releasing the PAM handle,...
Webmin <= 1.984 Multiple Vulnerabilities
Webmin is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Improper Authorization
Description When veyon is used in a Linux environment and is configured to use PAM as authentication method, The authorization of an account validity is missing. Therefore expired accounts or accounts with expired passwords can still login. This bug is in the provided tool veyon-auth-helper - aft...