PT-2022-15354 · Ibm · Ibm Urbancode Deploy

Name of the Vulnerable Software and Affected Versions: IBM UrbanCode Deploy UCD version 7.2.2.1 Description: The issue allows an authenticated user with special permissions to obtain elevated privileges due to improper handling of permissions. Recommendations: For IBM UrbanCode Deploy UCD version...

CVE-2020-14117

A improper permission configuration vulnerability in Xiaomi Content Center APP. This vulnerability is caused by the lack of correct permission verification in the Xiaomi content center APP, and attackers can use this vulnerability to invoke the sensitive component functions of the Xiaomi content...

Xiaomi Content Center 安全漏洞

Xiaomi Content Center Xiaomi Content Center is a content center of Xiaomi China, Inc. An incorrect permission configuration vulnerability exists in Xiaomi Content Center APP, which is caused by the lack of proper permission validation in Xiaomi Content Center APP, and can be exploited by attacker...

VMware Multiple Products Privilege Escalation Vulnerability

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts...

Privilege escalation

VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support scripts. A malicious actor with local access can escalate privileges to 'root'...

CVE-2022-23448

A vulnerability has been identified in SIMATIC Energy Manager Basic All versions V7.3 Update 1, SIMATIC Energy Manager PRO All versions V7.3 Update 1. Affected applications improperly assign permissions to critical directories and files used by the application processes. This could allow a local...

Zyxel AP Configurator 安全漏洞

The Zyxel AP Configurator ZAC is an AP Configurator from China-based Hopkins Technology Zyxel. It enables resellers to complete the process of configuring multiple APs as well as future maintenance of standalone APs. A security vulnerability exists in Zyxel AP Configurator ZAC version 1.1.4, whic...

FortiClient (Linux) - Improper directories permissions

An incorrect permission assignment for critical resource vulnerability CWE-732 in FortiClient for Linux may allow an unauthenticated attacker to access sensitive information in log files and directories via symbolic links...

CVE-2022-22948

The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may exploit this issue to gain access to sensitive information...

CVE-2022-23160

Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An remote malicious user could potentially exploit this vulnerability, leading to gaining write permissions on read-only files...

CVE-2022-22300

A improper handling of insufficient permissions or privileges in Fortinet FortiAnalyzer version 5.6.0 through 5.6.11, FortiAnalyzer version 6.0.0 through 6.0.11, FortiAnalyzer version 6.2.0 through 6.2.9, FortiAnalyzer version 6.4.0 through 6.4.7, FortiAnalyzer version 7.0.0 through 7 .0.2,...

The vulnerability of the /proc/self/setgroups utility for managing shadow accounts relates to the improper assignment of permissions to files, allowing an attacker to increase their privileges.

The vulnerability of the /proc/self/setgroups utility for managing shadow accounts is related to the improper assignment of permissions to files. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

CVE-2022-21204

Improper permissions for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-39992

There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability...

CVE-2022-21204

Improper permissions for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Emerson DeltaV Improper Permissions, Privileges, and Access Controls (CVE-2012-1818)

An unspecified ActiveX control in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to overwrite arbitrary files via unknown vectors. This plugin only works with Tenable.ot. Please visit...

Emerson DeltaV Improper Permissions, Privileges, and Access Controls (CVE-2016-9345)

An issue was discovered in Emerson DeltaV Easy Security Management DeltaV V12.3, DeltaV V12.3.1, and DeltaV V13.3. Critical vulnerabilities may allow a local attacker to elevate privileges within the DeltaV control system. This plugin only works with Tenable.ot. Please visit...

Emerson DeltaV Improper Permissions, Privileges, and Access Controls (CVE-2014-2349)

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 allows local users to modify or read configuration files by leveraging engineering-level privileges. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 70300 C Tenable...

CVE-2021-37086

There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox...

CVE-2021-37086

There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox...