CVE-2022-25768 Improper Access Control in UI upgrade process

The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade proces...

Improper Access Control

Overview Affected versions of this package are vulnerable to Improper Access Control due to the UI upgrade process. An attacker can access the version number or execute parts of the upgrade process without proper permissions. Note: As upgrading in the user interface is deprecated, this...

GHSA-X3JX-5W6M-Q2FC Mautic vulnerable to Improper Access Control in UI upgrade process

Impact The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade...

Mautic vulnerable to Improper Access Control in UI upgrade process

Impact The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade...

Improper Access Control

Overview Affected versions of this package are vulnerable to Improper Access Control due to the UI upgrade process. An attacker can access the version number or execute parts of the upgrade process without proper permissions. Note: As upgrading in the user interface is deprecated, this...

CVE-2024-38183

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network...

CVE-2024-38183

CVE-2024-38183 affects GroupMe with an improper access control vulnerability that allows an unauthenticated attacker to elevate privileges over a network. Multiple connected entries describe the issue as an elevation-of-privilege via insufficient access control and note that exploitation involves...

GroupMe Elevation of Privilege Vulnerability

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network...

BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of...

CVE-2024-28170

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-36261

Improper access control in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-32940

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-46937

An improper access control IDOR vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server SAS 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authentication. The is a brute-force attack on the...

PT-2024-7672 · Intel · Intel Raid Web Console

Name of the Vulnerable Software and Affected Versions: IntelR RAID Web Console all versions Description: The issue is related to improper access control in the IntelR RAID Web Console, which may allow an authenticated user to potentially enable denial of service via adjacent access. This can be...

CVE-2024-46937

An improper access control IDOR vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server SAS 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authentication. The is a brute-force attack on the...

Intel Raid Web Console 访问控制错误漏洞

Intel Raid Web Console is a web-based, Intel Corporation application that provides monitoring, maintenance, troubleshooting, and configuration capabilities for Intel RAID products. The Intel Raid Web Console is vulnerable to an access control error vulnerability that stems from the inclusion of a...

CVE-2024-46937

An improper access control IDOR vulnerability in the /api-selfportal/get-info-token-properties endpoint in MFASOFT Secure Authentication Server SAS 1.8.x through 1.9.x before 1.9.040924 allows remote attackers gain access to user tokens without authentication. The is a brute-force attack on the...

MFASOFT Secure Authentication Server 安全漏洞

MFASOFT Secure Authentication Server is a two-factor authentication system based on one-time passwords OTP from the Russian company MFASOFT. A security vulnerability exists in MFASOFT Secure Authentication Server SAS version 1.8.x through versions prior to 1.9.040924 that stems from improper acce...

PT-2024-7680 · Intel · Intel Raid Web Console

Name of the Vulnerable Software and Affected Versions: IntelR RAID Web Console all versions Description: The issue is related to improper access control in the IntelR RAID Web Console, which may allow an authenticated user to potentially enable information disclosure via local access. This could...

SYSCOM OMFLOW 安全漏洞

SYSCOM OMFLOW is an information maintenance management system of the Chinese company SYSCOM. A security vulnerability exists in SYSCOM OMFLOW versions 1.1.6.0 through 1.2.1.2, which originates from improperly restricting access to the system settings modification feature, allowing remote attacker...