Authorization

Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...

PT-2022-13479

Name of the Vulnerable Software and Affected Versions cobbler/cobbler versions prior to 3.3.2 Description The issue concerns improper authorization in the GitHub repository cobbler/cobbler. If PAM is correctly configured and a user account is set to expired, the expired user-account is still able...

CVE-2022-0860: Improper Authorization

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2...

PT-2022-13535

Name of the Vulnerable Software and Affected Versions saleor versions prior to 3.1.2 Description The issue concerns a missing authorization in the saleor repository. This problem allows for improper authorization. Recommendations For versions prior to 3.1.2, update to version 3.1.2 or later to...

CVE-2022-0821

CVE-2022-0821 affects Orchard Core (orchardcore) prior to version 1.3.0. The issue is described as improper authorization in the GitHub repository orchardcms/orchardcore, enabling a low-privilege user to create roles (as shown by Huntr/Red Hat and CNVD records). This implies a privilege/authoriza...

CVE-2022-0821

Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...

PT-2022-13448 · Unknown · Orchardcore

Name of the Vulnerable Software and Affected Versions: orchardcore versions prior to 1.3.0 Description: The issue is related to improper authorization in the GitHub repository orchardcms/orchardcore. Recommendations: For versions prior to 1.3.0, update to version 1.3.0 or later to resolve the iss...

CVE-2022-0821: Improper Authorization

Improper Authorization in GitHub repository orchardcms/orchardcore prior to 1.3.0...

Improper Authorization and possible DoS when using PAM Auth

Description When bareos versions after 18.2 are build and configured for PAM authentification it skips checking authorization completely. Expired accounts and accounts with expired passwords can still login. Further after wrong authentication or the code returns without releasing the PAM handle,...

Webmin <= 1.984 Multiple Vulnerabilities

Webmin is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Improper Authorization

Description When veyon is used in a Linux environment and is configured to use PAM as authentication method, The authorization of an account validity is missing. Therefore expired accounts or accounts with expired passwords can still login. This bug is in the provided tool veyon-auth-helper - aft...

CVE-2022-0829

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829 Improper Authorization in webmin/webmin

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829 Improper Authorization in webmin/webmin

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829: Improper Authorization

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2021-25011

The Maps Plugin using Google Maps for WordPress plugin before 1.8.1 does not have proper authorisation and CSRF in most of its AJAX actions, which could allow any authenticated users, such as subscriber to delete arbitrary posts and update the plugin's settings...

Improper Authorization in User Management to Vertical Privilege Escalation

Description Pandora FMS v7.0NG.759 allows improper authorization in User Management where any authenticated user with access to the User Management module could create, modify, delete any user with full admin privilege. The impact could lead to vertical privilege escalation to access the privileg...

Improper Authorization in dolibarr/dolibarr

Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more...

GHSA-4XC7-X2JR-CR74 Improper Authorization in dolibarr/dolibarr

Dolibarr allows improper access control issues in the userphoto modulepart. The impact could lead to data exposure as the attached files and documents may contain sensitive information of relevant parties such as contacts, suppliers, invoices, orders, stocks, agenda, accounting and more...

PT-2022-13392 · Peertube · Peertube

Name of the Vulnerable Software and Affected Versions: peertube versions prior to 4.1.0 Description: The issue concerns a missing authorization in the GitHub repository chocobozzz/peertube. This is also referred to as an improper authorization. No information is provided about the estimated numbe...