Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain

A flaw was found in Wildfly, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources...

Wildfly: Improper authorization issue in WildFlySecurityManager when using alternative protection domain

A flaw was found in Wildfly, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources...

Huawei E6878-370 Improper Authorization Vulnerability

The Huawei E6878-370 is a portable 5G router from Huawei China. A security vulnerability exists in Huawei E6878-370 version 10.0.3.1 H563SP1C00 and version 10.0.3.1 H563SP21C233, which stems from the device failing to properly restrict certain data received on the WAN port. An attacker could...

CVE-2020-9241: Undefined Security Weakness

Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1H563SP1C00,10.0.3.1H563SP21C233 have an improper authorization vulnerability. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device...

CVE-2020-7583: Improper Authorization

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0.8. The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify...

CVE-2020-7300

CVE-2020-7300 affects McAfee Data Loss Prevention (DLP) ePO extension prior to 11.5.3. An improper authorization flaw lets authenticated users with view-only privileges remotely alter configuration via carefully crafted HTTP POST messages. Impact is limited to configuration changes; exploitation ...

Security Advisory - Improper Authorization Vulnerability in Several Products

There is an improper authorization vulnerability in several products. The device does not restrict certain data received from WAN port. Successful exploit could allow an attacker at WAN side to manage certain service of the device. Vulnerability ID: HWPSIRT-2020-05063 This vulnerability has been...

CVE-2020-7300: Incorrect Authorization

Improper Authorization vulnerability in McAfee Data Loss Prevention DLP ePO extension prior to 11.5.3 allows authenticated remote attackers to change the configuration when logged in with view only privileges via carefully constructed HTTP post messages...

Cisco Data Center Network Manager Improper Authorization (cisco-sa-dcnm-improper-auth-7Krd9TDT)

According to its self-reported version, Cisco Data Center Network Manager is affected by an authentication bypass vulnerability in the REST API due to insufficient authorization of certain API functions. An attacker can exploit this vulnerability by sending a crafted request to the API using...

Siemens Automation License Manager

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: Automation License Manager ALM Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to locally escalate privileges and modify...

Huawei P30 and P30 Pro Denial of Service Vulnerability

The Huawei P30 and Huawei P30 Pro are both smartphones from the Chinese company Huawei Huawei. A denial of service vulnerability exists in Huawei P30 prior to version 10.1.0.160 C00E160R2P11 and Huawei P30 Pro prior to version 10.1.0.160 C00E160R2P8, which stems from a failure to properly...

CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

Authorization

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-9245

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-9245

The CVE-2020-9245 entry concerns Huawei P30 and P30 Pro smartphones (versions affected prior to 10.1.0.160) with a denial-of-service vulnerability caused by improper authorization. The issue can be triggered by tricking a user into installing and running a malicious app, potentially causing a DoS...

CVE-2020-9245: Undefined Security Weakness

HUAWEI P30 versions Versions earlier than 10.1.0.160C00E160R2P11;HUAWEI P30 Pro versions Versions earlier than 10.1.0.160C00E160R2P8 have a denial of service vulnerability. Certain system configuration can be modified because of improper authorization. The attacker could trick the user installing...

CVE-2020-1748

A flaw was found in Wildfly, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secure resources...

CVE-2020-9248

Huawei FusionComput 8.0.0 have an improper authorization vulnerability. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can compromise normal service...