PT-2021-3430 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.2 and earlier Magento versions 2.4.1-p1 and earlier Magento versions 2.3.6-p1 and earlier Description: The issue is related to an Improper Authorization vulnerability in the customers module. Successful exploitation could...

PT-2021-3431 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.2 and earlier Magento versions 2.4.1-p1 and earlier Magento versions 2.3.6-p1 and earlier Description: The issue is related to an Improper Authorization vulnerability via the "Create Customer" endpoint. Successful...

CVE-2021-21552

Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass the restricted environment and perform unauthorized actions on the...

VulnCheck KEV: CVE-2021-28799

QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device...

U.S. General Services Administration: [Transportation Management Services Solution 2.0] Improper authorization at tmss.gsa.gov leads to data exposure of all registered users

Summary: Hi team! I hope you are having a great Tuesday : Where: https://tmss.gsa.gov/ Who: Unathenticated users Why: Improper Access Control at /tmssserver/api/public/customerregistration/:id/userId/ I found an endpoint /tmssserver/api/public/customerregistration/:id/userId/ at...

CVE-2021-25382

An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command...

Authorization

An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command...

CVE-2021-25382

An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command...

CVE-2021-25382

CVE-2021-25382 concerns Samsung Secure Folder prior to SMR Oct-2020 Release 1, where improper authorization of a debugging command allows unauthorized access to Secure Folder contents. The PT-2021-16573 entry confirms affected software versions (Secure Folder prior to SMR Oct-2020 Release 1) and ...

CVE-2021-28799

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to...

Elastic: Improper authorization on `/api/as/v1/credentials/` allows any App Search user to access all API keys and escalate privileges

Summary Hello team, I hope you're doing well! App Search has a credentials page located at /as/credentials that lists all the API keys a user has access to, if any. That same page will 404 for users with Analyst or Editor role. This is all working as intended, however there is also an API endpoin...

SUSE: Security Advisory (SUSE-SU-2020:1210-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-21096

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user...

CVE-2021-21096

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user...

CVE-2021-21096 Adobe Bridge Genuine Software Service Incorrect Permission Assignment could lead to Denial-of-Service

Adobe Bridge versions 10.1.1 and earlier and 11.0.1 and earlier are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user...

CVE-2021-21096

Adobe Bridge CVE-2021-21096 is an Improper Authorization vulnerability in the Genuine Software Service affecting versions 10.1.1 and earlier and 11.0.1 and earlier. A low-privileged attacker could cause an application denial-of-service without user interaction. The issue is referenced in APSB21-2...

CVE-2021-0260

An improper authorization vulnerability in the Simple Network Management Protocol daemon snmpd service of Juniper Networks Junos OS leads an unauthenticated attacker being able to perform SNMP read actions, an Exposure of System Data to an Unauthorized Control Sphere, or write actions to OIDs tha...

Adobe Bridge Improper Authorization Vulnerability

Adobe Bridge is a free digital asset management application from Adobe. Adobe Bridge suffers from an improper authorization vulnerability. An attacker could exploit the vulnerability to elevate privileges...

PT-2021-5102 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 10.1.1 and earlier Adobe Bridge versions 11.0.1 and earlier Description: The issue is related to an Improper Authorization vulnerability in the Genuine Software Service of Adobe Bridge. A low-privileged attacker could...

Adobe Bridge 安全漏洞

Adobe Bridge is a free digital asset management application from Adobe. Adobe Bridge suffers from an improper authorization vulnerability. An attacker could exploit the vulnerability to elevate privileges...