CVE-2023-22348 Reading host_configs does not honour contact groups

Improper Authorization in RestAPI in Checkmk GmbH's Checkmk versions 2.1.0p28 and 2.2.0b8 allows remote authenticated users to read arbitrary hostconfigs...

CVE-2023-22348

CVE-2023-22348 affects Checkmk with improper authorization in the REST API. Versions prior to 2.1.0p28 and prior to 2.2.0b8 allow remote authenticated users to read arbitrary host_configs due to insufficient access checks. Impact is limited to confidentiality (read of host_configs); no integrity/...

Improper Authorization

github.com/answerdev/answer is vulnerable to Improper Authorization. The vulnerability exists due to the incorrect authorization checks in the library, which allows an attacker to rate their own answer as the best answer...

PT-2023-18447 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.1.0p28 Checkmk versions prior to 2.2.0b8 Description: The issue concerns improper authorization in the RestAPI of Checkmk, allowing remote authenticated users to read arbitrary host configs. Recommendations: For...

OTRS 8.0.x < 8.0.32 Information Disclosure / DoS Vulnerability (OSA-2023-03)

OTRS is prone to a information disclosure and denial of service DoS vulnerability via websocket push events. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Rocket.Chat 授权问题漏洞

Rocket.Chat is an open source team chat software. A security vulnerability exists in versions prior to Rocket.Chat 6.0 that stems from improper authorization and allows an attacker to manipulate the parameter rid to change certain methods...

CVE-2023-28325

Summary: CVE-2023-28325 affects Rocket.Chat versions prior to 6.0, where an improper authorization issue allows manipulating the rid parameter to alter the behavior of the updateMessage method, which only checks if a user is allowed to edit messages in a target room. What is vulnerable: The updat...

PT-2023-21650 · Unknown · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions prior to 6.0 Description: An improper authorization issue exists that could allow a hacker to manipulate the rid parameter and change the updateMessage method, which only checks whether the user is allowed to edit a messa...

CVE-2023-28325

An improper authorization vulnerability exists in Rocket.Chat 6.0 that could allow a hacker to manipulate the rid parameter and change the updateMessage method that only checks whether the user is allowed to edit message in the target room...

CVE-2022-45128

Improper authorization in the IntelR EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-43465

Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

Authorization

Improper authorization in the IntelR EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access...

Authorization

Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-41610

Improper authorization in IntelR EMA Configuration Tool before version 1.0.4 and IntelR MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-43465

Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-45128

Improper authorization in the IntelR EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-43465

Improper authorization in the IntelR SCS software all versions may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-14217 · Intel · Intel Scs

Name of the Vulnerable Software and Affected Versions: IntelR SCS software affected versions not specified Description: The issue is related to improper authorization in the IntelR SCS software, which may allow an authenticated user to potentially enable denial of service via local access...