CVE-2020-0064

CVE-2020-0064 is a MediaTek-specific issue (component: Omacp) documented in the Android May 2020 bulletin. It is classified as Information Disclosure (ID) with High severity and is linked to Android patch levels 2020-05-01 and later. The vulnerability arises from improper authorization when proce...

CVE-2020-0090

An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048...

PT-2020-11430

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to improper authorization while processing provisioning data. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...

PT-2020-11431

Name of the Vulnerable Software and Affected Versions Android versions Android SoC Description The issue is related to an improper authorization in the receiver component of the Android Suite Daemon. Recommendations For Android versions Android SoC, update to a version that includes the fix for t...

PT-2020-11456

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to an improper authorization in the receiver component of Email. This affects the Android operating system, specifically the Android SoC. Recommendations For Android...

CVE-2020-10620: Improper Authorization

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC communication does not include any credentials. This allows an attacker with network access to directly communicate with SoftPAC, including, for example, stopping the service remotely...

CVE-2020-0064: Undefined Security Weakness

An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855...

CVE-2020-0065: Undefined Security Weakness

An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448...

CVE-2020-0090: Undefined Security Weakness

An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048...

CVE-2020-12875: Incorrect Authorization

Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating specific parameters within the application...

CVE-2020-1998

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

CVE-2020-1998

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

Authorization

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

CVE-2020-1998 PAN-OS: Improper SAML SSO authorization of shared local users

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

CVE-2020-1998

CVE-2020-1998 describes an improper authorization vulnerability in PAN-OS where the system incorrectly applies local Linux user permissions instead of the intended SAML permissions when the username is shared for SSO. Affected are PAN-OS versions: 7.1.x before 7.1.26; 8.0.x before 8.1.13; 8.1.x b...

PT-2020-15221

Name of the Vulnerable Software and Affected Versions PAN-OS versions prior to 7.1.26 PAN-OS versions prior to 8.0.21 PAN-OS versions prior to 8.1.13 PAN-OS versions prior to 9.0.6 PAN-OS versions prior to 9.1.1 Description An improper authorization issue in PAN-OS mistakenly uses the permissions...

CVE-2020-1998: Improper Authorization

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO authentication. This can result in authentication bypass and unintended resource...

The vulnerability of the Astra Linux Directory service’s EPPT management system, related to improper authorization, allows a perpetrator to access confidential data and also trigger a service failure.

The vulnerability of the Astra Linux Directory Service Management System ALD is related to an authentication error for local users. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

SUSE-SU-2020:1210-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-12243: Fixed a denial of service related to recursive filters bsc1170771. - CVE-2019-13565: Fixed an authentication bypass caused by incorrect authorization of another connection, granting excess connection rights bsc1143194. -...

CVE-2020-10686: Improper Authorization

A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post different credential IDs and possibly remove MFA devices for other users...