PT-2022-13392 · Peertube · Peertube

Name of the Vulnerable Software and Affected Versions: peertube versions prior to 4.1.0 Description: The issue concerns a missing authorization in the GitHub repository chocobozzz/peertube. This is also referred to as an improper authorization. No information is provided about the estimated numbe...

CVE-2022-21196 Airspan Networks Mimosa Improper Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...

CVE-2022-21196 Airspan Networks Mimosa Improper Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...

CVE-2022-21196: Improper Authorization

MMP: All versions prior to v1.0.3, PTP C-series: Device versions prior to v2.8.6.1, and PTMP C-series and A5x: Device versions prior to v2.5.4.1 does not perform proper authorization and authentication checks on multiple API routes. An attacker may gain access to these API routes and achieve remo...

PT-2022-14874

Name of the Vulnerable Software and Affected Versions MMP versions prior to 1.0.3 PTP C-series versions prior to 2.8.6.1 PTMP C-series versions prior to 2.5.4.1 A5x versions prior to 2.5.4.1 Description The issue concerns improper authorization checks on multiple API functions, allowing an attack...

PT-2022-14916 · Mmp +2 · Mmp +2

Name of the Vulnerable Software and Affected Versions: MMP versions prior to 1.0.3 PTP C-series versions prior to 2.8.6.1 PTMP C-series and A5x versions prior to 2.5.4.1 Description: The issue concerns improper authorization and authentication checks on multiple API routes. This could allow an...

Improper Authorization in webmin/webmin

Description The /cron/saveallow.cgi endpoint is accessible to any authenticated low privilege users resulting in controlling user access to cron jobs. They could allow and deny other users access to cron jobs affecting the Scheduled Cron Jobs module. Proof of Concept Affected Endpoint: GET...

Improper Authorization

librenms is vulnerable to improper authorization. The vulnerability exists due to the lack of validation of the user's role and level allowing an attacker to switch on/off installed plugins...

Improper Authorization in librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

GHSA-PPFM-RJ6P-38Q6 Improper Authorization in librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

Authorization

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587 Improper Authorization in librenms/librenms

Improper Authorization in Packagist librenms/librenms prior to 22.2.0...

CVE-2022-0587

Summary: CVE-2022-0587 affects the Librenms project (librenms/librenms) prior to version 22.2.0, due to improper authorization that could allow manipulation of plugins or user-accessible settings. Affected software: LibreNMS repository/librenms (Packagist distribution). Root cause / vulnerability...

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

Authorization

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

CVE-2021-43948

Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to view the names of private objects via an Improper Authorization vulnerability in the "Move objects" feature. The affected versions are before version 4.21.0...

CVE-2021-43948

Atlassian Jira Service Management Server/Data Center (pre-4.21.0) is affected by CVE-2021-43948 via an Improper Authorization in the Move objects feature. The issue allows authenticated remote attackers to view the names of private objects. Affected versions are before 4.21.0; the fixed version i...