6096 matches found
CVE-2024-38194
CVE-2024-38194 represents an Elevation of Privilege vulnerability in Azure Web Apps caused by improper authorization. The CVE is cited as enabling an authenticated attacker to elevate privileges over a network. Connected sources corroborate Azure Web Apps as the affected product and indicate Micr...
Azure Web Apps Elevation of Privilege Vulnerability
An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network...
PT-2024-27899 · Microsoft · Azure Web Apps
Name of the Vulnerable Software and Affected Versions: Azure Web Apps affected versions not specified Description: An authenticated attacker can exploit an improper authorization issue in Azure Web Apps to elevate privileges over a network. Recommendations: At the moment, there is no information...
CVE-2024-7015
Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...
CVE-2024-7015
CVE-2024-7015 affects Profelis Informatics and Consulting’s PassBox prior to v1.2. The issue is described as missing authentication for critical functions, resulting in authentication abuse and potential unauthorized access to protected operations. Technical detail from PT-2024-38032 confirms aff...
CVE-2024-7015 Improper Authentication in Profelis Informatics and Consulting's PassBOX
Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse. This issue affects PassBox: before v1.2...
CVE-2024-45203
Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android versions prior 5.69.0 and "@cosme" App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a...
CVE-2024-45203
CVE-2024-45203 concerns the @cosme App (Android before 5.69.0; iOS before 6.74.0) where the custom URL scheme handler improperly authorizes, allowing an attacker to direct a user to an arbitrary website and potentially phish. The root cause is inadequate restriction of the URL scheme handler, ena...
CVE-2024-45203
Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android versions prior 5.69.0 and "@cosme" App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a...
PT-2024-38032 · Profelis Informatics Consulting · Passbox
Name of the Vulnerable Software and Affected Versions: Profelis Informatics and Consulting PassBox versions prior to 1.2 Description: The issue is related to improper authentication, missing authentication for critical functions, and improper authorization, allowing authentication abuse. This can...
Security Bulletin: IBM OpenPages vulnerable to exposure of sensitive information through improper authorization controls on APIs. (CVE-2024-35151)
Summary A vulnerability caused by improper authorization checks could allow authenticated users access to sensitive information through APIs. Vulnerability Details CVEID:CVE-2024-35151 DESCRIPTION: IBM OpenPages with Watson could allow authenticated users access to sensitive information through...
automation-controller: Gain access to the k8s API server via job execution with Container Group
An improper authorization flaw exists in the Ansible Automation Controller. This flaw allows an attacker using the k8S API server to send an HTTP request with a service account token mounted via automountServiceAccountToken: true, resulting in privilege escalation to a service account...
CVE-2024-20497 Cisco Expressway Edge Improper Authorization Vulnerability
A vulnerability in Cisco Expressway Edge Expressway-E could allow an authenticated, remote attacker to masquerade as another user on an affected system. This vulnerability is due to inadequate authorization checks for Mobile and Remote Access MRA users. An attacker could exploit this vulnerabilit...
CVE-2024-34651
Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files...
CVE-2024-34651
Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files...
CVE-2024-34642
Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information...
CVE-2024-34642
Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information...
CVE-2024-34651
Improper authorization in My Files prior to SMR Sep-2024 Release 1 allows local attackers to access restricted data in My Files...
CVE-2024-34651
Samsung My Files on Samsung Mobile devices is affected by CVE-2024-34651 due to improper authorization that allows local attackers to access restricted data. The vulnerability affects My Files prior to the SMR Sep-2024 Release 1; remediation is to apply SMR Sep-2024 Release 1 or later updates. Co...