CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39905: Improper Authorization

Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent...

CVE-2022-39902: Improper Authorization

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

CVE-2022-39902

The CVE-2022-39902 entry concerns Samsung Exynos baseband prior to SMR DEC-2022 Release 1, with improper authorization allowing a remote attacker to obtain sensitive data (including IMEI) via an emergency call. The vulnerability arises from insufficient access restrictions in the baseband compone...

CVE-2022-39902

Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call...

Security Advisory - Improper Authorization Vulnerability in a Huawei Children's Watch

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file. Vulnerability ID:HWPSIRT-2022-62345 This vulnerability has been assigned a CVE ID: CVE-2022-45874...

Improper Authorization

github.com/codenotary/immudb is vulnerable to improper authorization. A malicious attacker is able to provide falsified proof that will be accepted by the client SDK, signing a falsified transaction replacing the genuine one. This vulnerability only affects immudb client SDKs, the immudb server...

Improper Authorization

github.com/codenotary/immudb is vulnerable to improper authorization. The library does not properly validate SDKs server UUIDs which allows a malicious server to change the reported UUID, tricking the client to treat it as a different server thus accepting a state completely irrelevant to the one...

CVE-2022-41326

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application...

CVE-2022-41326: Missing Authorization

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application...

PT-2022-27517 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 28610 Acronis Cyber Protect 15 versions before build 30984 Description: The issue is related to sensitive information disclosure and manipulation due to improper authorization. Recommendations: For Acronis...

Sensitive information disclosure and manipulation due to improper authorization

...

CVE-2022-40845

The Tenda AC1200 Router model W15Ev2 V15.11.0.101576 is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not...

CVE-2022-40845

The Tenda AC1200 Router model W15Ev2 V15.11.0.101576 is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not...

CVE-2022-40843

The Tenda AC1200 V-W15Ev2 V15.11.0.101576 router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of...

Authorization

The Tenda AC1200 V-W15Ev2 V15.11.0.101576 router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of...

PT-2022-25574 · Tenda · Tenda Ac1200

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 V-W15Ev2 version V15.11.0.101576 Description: The issue concerns improper authorization and improper session management, allowing the router login page to be bypassed. This enables authenticated attackers to read the router's...

PT-2022-25576 · Tenda · Tenda Ac1200 Router

Name of the Vulnerable Software and Affected Versions: Tenda AC1200 Router model W15Ev2 version V15.11.0.101576 Description: The issue allows an attacker with access to the router to expose sensitive information they are not explicitly authorized to have, by combining a password exposure...

CVE-2022-40845: Direct Request

The Tenda AC1200 Router model W15Ev2 V15.11.0.101576 is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not...

CVE-2022-40843: Undefined Security Weakness

The Tenda AC1200 V-W15Ev2 V15.11.0.101576 router is vulnerable to improper authorization / improper session management that allows the router login page to be bypassed. This leads to authenticated attackers having the ability to read the routers syslog.log file which contains the MD5 password of...