CVE-2022-34256

Adobe Commerce (Magento) vulnerable in versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier, and 2.4.4 and earlier due to an Improper Authorization issue that could lead to privilege escalation and access to other users’ data. Exploitation does not require user interaction. The issue is documented...

CVE-2022-34256 Adobe Commerce Improper Authorization Privilege escalation

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does no...

PT-2022-17953 · Unknown · Sequi Portbloque S

Name of the Vulnerable Software and Affected Versions: Sequi PortBloque S affected versions not specified Description: The issue is related to an improper authorization vulnerability. This vulnerability may allow a low-privileged user to perform administrative functions by using specifically...

Sequi PortBloque S

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sequi Equipment: Sequi PortBloque S Vulnerabilities : Improper Authentication, Improper Authorization 2. RISK EVALUATION Successful exploitation of these vulnerabilities could result in unauthorized...

Improper Authorization lead a user add an arbitrary agent into Team

Description A Vulnerability in edit team function lead an user add another user via ID to Team, alternatively know the email of every user in Chatwoot Step to reproduce - login to the app -navigate to the Team setting: https://app.chatwoot.com/app/accounts/id/settings/teams/list -Create new or ed...

CVE-2022-35980 OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information

OpenSearch Security is a plugin for OpenSearch that offers encryption, authentication and authorization. Versions 2.0.0.0 and 2.1.0.0 of the security plugin are affected by an information disclosure vulnerability. Requests to an OpenSearch cluster configured with advanced access control features...

GHSA-F4QR-F4XX-HJXW OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information

Impact Requests to an OpenSearch cluster configured with advanced access control features document level security DLS, field level security FLS, and/or field masking will not be filtered when the query's search pattern matches an aliased index. OpenSearch Dashboards creates an alias to .kibana by...

Splunk Enterprise Deployment Server < 9.0 Improper Authorization

The version of Splunk Enterprise installed on the remote host is prior to 9.0. It may, therefore, be affected by an improper authorization vulnerability if the Deployment Server component is in use where forwarder bundles can be downloaded without authentication. Note that Nessus has not tested f...

GitLab 14.6.x - 15.0.4, 15.1.x - 15.1.3, 15.2 Improper Authorization Vulnerability

GitLab is prone to an improper authorization vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

WordPress Plugin YaySMTPr 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

The vulnerability of the SAP Business Objects Business Intelligence Platform, related to improper authorization, allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the SAP Business Objects Business Intelligence Platform is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to modify, add, or delete data...

Improper Authorization

Overview Affected versions of this package are vulnerable to Improper Authorization in the UpdateSavedSearch function in savedsearches.go that allows a user to delete but not read another user's saved searches. Remediation Upgrade github.com/sourcegraph/sourcegraph-public-snapshot/cmd/frontend to...

CVE-2022-31178 Improper Authorization in eLabFTW

eLabFTW is an electronic lab notebook manager for research teams. A vulnerability was discovered which allows a logged in user to read a template without being authorized to do so. This vulnerability has been patched in 4.3.4. Users are advised to upgrade. There are no known workarounds for this...

CVE-2022-2595

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

CVE-2022-2595

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

Authorization

Improper Authorization in GitHub repository kromitgmbh/titra prior to 0.79.1...

CVE-2022-2595

CVE-2022-2595 concerns the GitHub repository kromitgmbh/titra, affected in versions prior to 0.79.1. The root cause is improper authorization in the Add Extension functionality, which can allow a low-privilege/unauthenticated user to upload a malicious extension and trigger remote code execution....

UBUNTU-CVE-2022-26310

Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical privilege escalation to access the...

Authorization

Pandora FMS v7.0NG.760 and below allows an improper authorization in User Management where any authenticated user with access to the User Management module could create, modify or delete any user with full admin privilege. The impact could lead to a vertical privilege escalation to access the...

CVE-2022-26310

CVE-2022-26310 affects Pandora FMS v7.0NG.760 and earlier, via improper authorization in User Management that lets any authenticated user with access to that module create, modify, or delete users with full admin privileges, enabling vertical privilege escalation to admin level. The connected doc...