CVE-2020-15102

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

CVE-2020-15102

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

CVE-2020-15102

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

Authorization

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

CVE-2020-15102

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

CVE-2020-15102: Improper Access Control

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

PT-2020-14186

Name of the Vulnerable Software and Affected Versions PrestaShop Dashboard Productions versions prior to 2.1.0 Description The issue is related to improper authorization, allowing an attacker to modify the configuration. Recommendations For versions prior to 2.1.0, update to version 2.1.0 to...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

Huawei Mate 30 Pro Improper Authorization Vulnerability

Huawei Mate 30 Pro is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Mate 30 Pro 10.1.0.150 C00E136R5P3, which stems from the program's failure to properly restrict an application's use of system services. The vulnerability can be...

PT-2020-20550

Name of the Vulnerable Software and Affected Versions Huawei Mate 30 Pro versions prior to 10.1.0.150C00E136R5P3 Description The issue is related to improper authorization, where the system fails to properly restrict the use of system services by applications. An attacker could exploit this by...

CVE-2020-9256: Undefined Security Weakness

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-3150: Improper Authorization

A vulnerability in the web-based management interface of Cisco Small Business RV110W and RV215W Series Routers could allow an unauthenticated, remote attacker to download sensitive information from the device, which could include the device configuration. The vulnerability is due to improper...

PT-2020-3132

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall versions affected versions not specified Cisco RV215W Wireless-N VPN Router versions affected versions not specified Description The issue is related to errors in HTTP request authorization in the web-based...

Improper authorization of users and groups with the same base name in gitlab-oauth

gitlab-oauth 1.5 and earlier does not differentiate between user names and hierarchical group names when performing authorization. This allows an attacker with permissions to create groups in GitLab to gain the privileges granted to another user or group. gitlab-oauth 1.6 performs user name and...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-5356: Improper Authorization

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

PT-2020-18423

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager PPDM versions prior to 19.4 Dell PowerProtect X400 versions prior to 3.2 Description The issue concerns an improper authorization vulnerability. A remote authenticated malicious user may download any file from th...