PT-2022-13392 · Peertube · Peertube

Name of the Vulnerable Software and Affected Versions: peertube versions prior to 4.1.0 Description: The issue concerns a missing authorization in the GitHub repository chocobozzz/peertube. This is also referred to as an improper authorization. No information is provided about the estimated numbe...

CVE-2022-21196 Airspan Networks Mimosa Improper Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...

CVE-2022-21196 Airspan Networks Mimosa Improper Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...

PT-2022-14916 · Mmp +2 · Mmp +2

Name of the Vulnerable Software and Affected Versions: MMP versions prior to 1.0.3 PTP C-series versions prior to 2.8.6.1 PTMP C-series and A5x versions prior to 2.5.4.1 Description: The issue concerns improper authorization and authentication checks on multiple API routes. This could allow an...

Improper Authorization in webmin/webmin

Description The /cron/saveallow.cgi endpoint is accessible to any authenticated low privilege users resulting in controlling user access to cron jobs. They could allow and deny other users access to cron jobs affecting the Scheduled Cron Jobs module. Proof of Concept Affected Endpoint: GET...

Improper Authorization

librenms is vulnerable to improper authorization. The vulnerability exists due to the lack of validation of the user's role and level allowing an attacker to switch on/off installed plugins...

Improper Authorization in librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

GHSA-PPFM-RJ6P-38Q6 Improper Authorization in librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

Authorization

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587 Improper Authorization in librenms/librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587

Summary: CVE-2022-0587 affects the Librenms project (librenms/librenms) prior to version 22.2.0, due to improper authorization that could allow manipulation of plugins or user-accessible settings. Affected software: LibreNMS repository/librenms (Packagist distribution). Root cause / vulnerability...

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

Authorization

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

CVE-2021-43948

Atlassian Jira Service Management Server/Data Center (pre-4.21.0) is affected by CVE-2021-43948 via an Improper Authorization in the Move objects feature. The issue allows authenticated remote attackers to view the names of private objects. Affected versions are before 4.21.0; the fixed version i...

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

Incorrect Authorization in WildFly Elytron

A flaw was found in all supported versions before wildfly-elytron-1.6.8.Final-redhat-00001, where the WildFlySecurityManager checks were bypassed when using custom security managers, resulting in an improper authorization. This flaw leads to information exposure by unauthenticated access to secur...

Improper Authorization in chocobozzz/peertube

Description The app doesn't check the status of video when making data changes. Normal users can create new comment or reply comment in private videos. Proof of Concept note: I'm using instance p.lu for testing - Step 1: Login as video test1 and upload private video. Get video ID of private video...

Improper Authorization in librenms/librenms

Description LibreNMS v22.1.0 allows users with the normal role/level to interact with the plugin setting resulting in the users could take action such as switching on/off any installed plugins which are supposedly accessible by the Administrator only. Proof of Concept Affected endpoints: 1 GET...