GHSA-MCG6-H362-CMQ5 Improper Authorization in cobbler

Impact If PAM is correctly configured and a user account is set to expired, the expired user-account is still able to successfully log into Cobbler in all places Web UI, CLI & XMLRPC-API. The same applies to user accounts with passwords set to be expired. Patches There is a patch for the latest...

CVE-2022-0860

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...

PYSEC-2022-177

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...

PYSEC-2022-177

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...

UBUNTU-CVE-2022-0860

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...

CVE-2022-0860 Improper Authorization in cobbler/cobbler

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...

CVE-2022-0860

CVE-2022-0860 affects cobbler/cobbler prior to 3.3.2. The issue is described as Improper Authorization in the Cobbler repository, potentially enabling unauthorized access due to insufficient access controls. Connected documents (Ubuntu/SUSE/Nessus references) corroborate that this CVE is included...

CVE-2022-0821

Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...

Authorization

Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...

PT-2022-13535

Name of the Vulnerable Software and Affected Versions saleor versions prior to 3.1.2 Description The issue concerns a missing authorization in the saleor repository. This problem allows for improper authorization. Recommendations For versions prior to 3.1.2, update to version 3.1.2 or later to...

CVE-2022-0821

CVE-2022-0821 affects Orchard Core (orchardcore) prior to version 1.3.0. The issue is described as improper authorization in the GitHub repository orchardcms/orchardcore, enabling a low-privilege user to create roles (as shown by Huntr/Red Hat and CNVD records). This implies a privilege/authoriza...

PT-2022-13448 · Unknown · Orchardcore

Name of the Vulnerable Software and Affected Versions: orchardcore versions prior to 1.3.0 Description: The issue is related to improper authorization in the GitHub repository orchardcms/orchardcore. Recommendations: For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the iss...

Improper Authorization and possible DoS when using PAM Auth

Description When bareos versions after 18.2 are build and configured for PAM authentification it skips checking authorization completely. Expired accounts and accounts with expired passwords can still login. Further after wrong authentication or the code returns without releasing the PAM handle,...

Webmin <= 1.984 Multiple Vulnerabilities

Webmin is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Improper Authorization

Description When veyon is used in a Linux environment and is configured to use PAM as authentication method, The authorization of an account validity is missing. Therefore expired accounts or accounts with expired passwords can still login. This bug is in the provided tool veyon-auth-helper - aft...

CVE-2022-0829

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829 Improper Authorization in webmin/webmin

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829 Improper Authorization in webmin/webmin

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2021-25011

The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings...

Improper Authorization in User Management to Vertical Privilege Escalation

Description Pandora FMS v7.0NG.759 allows improper authorization in User Management where any authenticated user with access to the User Management module could create, modify, delete any user with full admin privilege. The impact could lead to vertical privilege escalation to access the privileg...