CVE-2020-0064

An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855...

Authorization

An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448...

CVE-2020-0064

CVE-2020-0064 is a MediaTek-specific issue (component: Omacp) documented in the Android May 2020 bulletin. It is classified as Information Disclosure (ID) with High severity and is linked to Android patch levels 2020-05-01 and later. The vulnerability arises from improper authorization when proce...

CVE-2020-0064

An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855...

CVE-2020-0090

An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048...

CVE-2020-0065: Undefined Security Weakness

An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448...

CVE-2020-0090: Undefined Security Weakness

An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048...

CVE-2020-0064: Undefined Security Weakness

An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855...

CVE-2020-12875: Incorrect Authorization

Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating specific parameters within the application...

CVE-2020-10620: Improper Authorization

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely...

CVE-2020-1998

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

CVE-2020-1998

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

Authorization

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

CVE-2020-1998 PAN-OS: Improper SAML SSO authorization of shared local users

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

CVE-2020-1998

CVE-2020-1998 describes an improper authorization vulnerability in PAN-OS where the system incorrectly applies local Linux user permissions instead of the intended SAML permissions when the username is shared for SSO. Affected are PAN-OS versions: 7.1.x before 7.1.26; 8.0.x before 8.1.13; 8.1.x b...

CVE-2020-1998: Improper Authorization

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper authorization, allows a perpetrator to access confidential data and also trigger a service failure.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an authentication error for local users. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

SUSE-SU-2020:1210-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-12243: Fixed a denial of service related to recursive filters bsc1170771. - CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights bsc1143194. -...

CVE-2020-10686: Improper Authorization

A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users...

SUSE-SU-2020:14353-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights bsc1143194. - CVE-2019-13057: Fixed an issue with improper authorization with delegated database admin...