Security Advisory - Improper Authorization Vulnerability in Huawei Product

There is an improper authorization vulnerability in Huawei FusionComput. A module does not verify some input correctly and authorizes files with incorrect access. Attackers can exploit this vulnerability to launch privilege escalation attack. This can compromise normal service. Vulnerability ID:...

CVE-2020-14486: Improper Authorization

An attacker may bypass permission/authorization checks in OpenClinic GA 5.09.02 and 5.89.05b by ignoring the redirect of a permission failure, which may allow unauthorized execution of commands...

Security Advisory - Denial of Service Vulnerability in Huawei Smartphone

There is a denial of service vulnerability in Huawei smartphone. A module does not deal with mal-crafted messages and it leads to memory leak. Attackers can exploit this vulnerability to make the device denial of service. Vulnerability ID: HWPSIRT-2020-04061 This vulnerability has been assigned a...

CVE-2020-9251

HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...

CVE-2020-9251

HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...

CVE-2020-9251

HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...

PT-2020-20546

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R2P11 HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8 Since both versions are essentially the same, with the difference being in the patch level R2P11 vs R3P8, and given that R3P...

CVE-2020-9251: Undefined Security Weakness

HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...

Atlassian Jira < 8.5.5 / 8.6.x < 8.7.2 / 8.8.x < 8.8.1 Improper authorization

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.5, or version 8.6.x prior to 8.7.2, 8.8.x prior to 8.8.1. It is, therefore, affected by a Improper authorization vulnerability. It allow remote attackers to enumerate...

CVE-2020-15102

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

CVE-2020-15102

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

CVE-2020-15102

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

Authorization

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

CVE-2020-15102

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

PT-2020-14186

Name of the Vulnerable Software and Affected Versions PrestaShop Dashboard Productions versions prior to 2.1.0 Description The issue is related to improper authorization, allowing an attacker to modify the configuration. Recommendations For versions prior to 2.1.0, update to version 2.1.0 to...

CVE-2020-15102: Improper Access Control

In PrestaShop Dashboard Productions before version 2.1.0, there is improper authorization which enables an attacker to change the configuration. The problem is fixed in 2.1.0...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

Huawei Mate 30 Pro Improper Authorization Vulnerability

Huawei Mate 30 Pro is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Mate 30 Pro 10.1.0.150 C00E136R5P3, which stems from the program's failure to properly restrict an application's use of system services. The vulnerability can be...