PT-2014-6028

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions 7.0 through P15 EMC Documentum Content Server version 7.1 before P08 EMC Documentum Content Server before 6.7 SP2 P17 Description The issue allows remote authenticated users to obtain super-user privilege...

PT-2014-6029

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions prior to 6.7 SP2 P17 EMC Documentum Content Server versions 7.0 through P15 EMC Documentum Content Server versions prior to 7.1 P08 Description The issue allows remote authenticated sysadmins to gain...

EMC Documentum Content Server Multiple Vulnerabilities (ESA-2014-064)

The remote host is running a version of EMC Documentum Content Server that is affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper authorization checks. A remote, authenticated attacker can exploit this vulnerability to execute arbitrary code via a...

EMC Documentum Content Server Information Disclosure (ESA-2014-026)

The remote host is running a version of EMC Documentum Content Server that is affected by an information disclosure vulnerability due to improper authorization checks. A remote, authenticated user can exploit this vulnerability to read metadata from folders outside of restricted folders configure...

PT-2014-4752

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions prior to 6.7 SP1 P28 EMC Documentum Content Server versions 6.7 SP2 prior to P15 EMC Documentum Content Server versions 7.0 prior to P15 EMC Documentum Content Server versions 7.1 prior to P06 Description...

PT-2014-4751

Name of the Vulnerable Software and Affected Versions EMC Documentum Content Server versions prior to 6.7 SP1 P28 EMC Documentum Content Server versions 6.7 SP2 prior to P15 EMC Documentum Content Server versions 7.0 prior to P15 EMC Documentum Content Server versions 7.1 prior to P06 Description...

Improper authorization checks in files_external - ownCloud

Due to not verifying whether an user has been granted access to add external storages an authenticated user could even mount external storage e.g. SMB/FTP/etc. without permission. Affected Software ownCloud Server 6.0.3 CVE-2014-3835 ownCloud Server 5.0.16 CVE-2014-3835 Action Taken We reviewed t...

Server: Improper authorization checks in documents

Due to not verifying whether an user has permission to rename files of other users an authenticated user could rename files of other users without permission. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

Server: Improper authorization checks in files_external

Due to not verifying whether an user has been granted access to add external storages an authenticated user could even mount external storage e.g. SMB/FTP/etc. without permission. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

Server: Improper authorization checks in contacts

Due to not verifying whether an user has been granted access to an address book, authenticated users are able to access arbitrary contacts of other users. For more information please consult the official advisory. This advisory is licensed CC BY-SA 4.0...

CVE-2014-2349: Improper Authorization

Emerson DeltaV 10.3.1, 11.3, 11.3.1, and 12.3 uses hardcoded credentials for diagnostic services, which allows remote attackers to bypass intended access restrictions via a TCP session, as demonstrated by a session that uses the telnet program...

CommonSpot < 7.0.2 / 8.0.3 / 9.0.0 Multiple Vulnerabilities

According to its version number, the CommonSpot install hosted on the remote web server is affected by multiple vulnerabilities : - An access restriction bypass via a direct request. CVE-2014-2859 - Multiple cross-site scripting XSS vulnerabilities. CVE-2014-2860, CVE-2014-2861 - Improper...

CVE-2014-0672: Undefined Security Weakness

The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface...

Siemens WinCC 7.0 SP3 Multiple Vulnerabilities

Overview This advisory provides mitigation details for vulnerabilities that impact the Siemens SIMATIC WinCC. Positive Technologies and Siemens ProductCERT have identified multiple vulnerabilities in the Siemens SIMATIC WinCC, which is used to configure SIMATIC operator devices. Siemens has...

Schweitzer Engineering Laboratories AcSELerator Improper Authorization Vulnerability

Overview This advisory provides mitigation details for a vulnerability affecting the Schweitzer Engineering Laboratories SEL AcSELerator QuickSet software. Independent researcher Michael Toecker of Digital Bond has identified an improper authorization vulnerability in the SEL AcSELerator...

PT-2013-6150

Name of the Vulnerable Software and Affected Versions SAP Sybase Adaptive Server Enterprise ASE versions prior to 15.0.3 ESD4.3 SAP Sybase Adaptive Server Enterprise ASE versions prior to 15.5 ESD5.3 SAP Sybase Adaptive Server Enterprise ASE versions prior to 15.7 SP50 SAP Sybase Adaptive Server...

CVE-2013-6859: Improper Authentication

SAP Sybase Adaptive Server Enterprise ASE before 15.0.3 ESD4.3. 15.5 before 15.5 ESD5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 does not properly perform authorization, which allows remote authenticated users to gain privileges via unspecified vectors...

PT-2019-4141

Name of the Vulnerable Software and Affected Versions Kaspersky Protection extension for Google Chrome versions prior to 30.112.62.0 Description The issue is related to improper authorization in the Kaspersky Protection extension for Google Chrome, allowing unauthorized access to its features. Th...

PT-2013-4823

Name of the Vulnerable Software and Affected Versions IBM Rational Policy Tester version 8.5 before 8.5.0.5 Description The issue allows remote authenticated users to perform spoofing attacks involving an HTTP redirect. This is due to improper authorization checks for changes to the set of...

Improper authorization checks in documents - ownCloud

Due to not verifying whether an user has permission to rename files of other users an authenticated user could rename files of other users without permission. Affected Software ownCloud Server 6.0.3 CVE-2014-3834 Action Taken We reviewed the access-control of the documents application and ensured...