maine.gov Improper Access Control vulnerability OBB-2112263

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| maine.gov ---|--- Open Bug Bounty...

Microsoft Azure 权限许可和访问控制问题漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation. A vulnerability exists in Microsoft Azure with privilege licensing and access control issues. The following products and versions are affected: Azure CycleCloud version 7.9.10...

Totolink A720R License Issue Vulnerability

The Totolink A720R is a wireless router from Taiwan, China's Gion Electronics Totolink. The Totolink A720R suffers from an authorization issue vulnerability in version V4.1.5cu.470B20200911, which stems from an improper implementation of the form login feature in the software version, and can be...

Security Bulletin: Multiple Vulnerabilities in IBM® WebSphere Application Server Liberty affect IBM LKS Administration and Reporting Tool and its Agent

Summary There are multiple vulnerabilities in the IBM® WebSphere Application Server Liberty used by IBM LKS Administration and Reporting Tool and its Agent. A fix has been identified and is being published here. Vulnerability Details CVEID: CVE-2021-26296 DESCRIPTION: Apache MyFaces is vulnerable...

Rancher Labs Rancher Licensing Issue Vulnerability

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. Rancher Labs Rancher has an authorization issue vulnerability that stems from the product's lack of effective privilege management for the management of critical resources, which could be...

IBM Security Access Manager Privilege Permission and Access Control Issues Vulnerability

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker is vulnerable to a privilege permission and...

Citrix Hypervisor Open Source Licensing and Attribution

The Citrix Hypervisor product is a compilation of software packages. Each package is governed by its own license. The complete licensing terms applicable to a given package can be found in the source RPM of the package, unless the package is covered by a proprietary license which does not permit...

How to navigate open source licensing risks

Vulnerabilities aren't the only risk that comes with open source software use. Learn how you can best mitigate licensing risks to ensure your team is meeting all legal requirements while building with open source code...

XWiki Platform licensing issue vulnerability

Xwiki Platform is a Wiki platform for creating Web collaboration applications from the French company Xwiki. XWiki Platform is vulnerable to authorization issues, which can be exploited by attackers to reset authentication failure records...

Information about Kasten K10 licensing and Kasten K10 support

Objective This article documents how to retrieve a purchased Kasten K10 license code. Solution How to retrieve a copy of the initial Kasten K10 license code After you purchase a Kasten K10 license code, it is sent to your email. If that license code has been lost or another copy is needed, you mu...

Receita Federal IRPF Licensing Issue Vulnerability

Receita Federal Imposto de Renda Pessoa Física, a personal income tax application from Receita Federal, Inc. has an authorization problem vulnerability in Receita Federal IRPF that stems from a lack of authentication measures or insufficient authentication strength in the network system or produc...

Autodesk Licensing Services Access Control Error Vulnerability

Autodesk Licensing Services is a licensing service of the American company Autodesk. An Access Control Error vulnerability exists in Autodesk Licensing Services, which originates from a malicious user with restricted privileges can run any number of tools on the system to identify services...

CVE-2021-27032

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

CVE-2021-27032

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

CVE-2021-27032

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

Privilege escalation

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

CVE-2021-27032

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

CVE-2021-27032

CVE-2021-27032 concerns Autodesk Licensing Installer/Service. The issue is a local privilege-escalation vulnerability where a user with limited privileges can identify and modify services running with elevated permissions, potentially owning the service due to weak service permissions. Impact des...

Autodesk Licensing Services 访问控制错误漏洞

Autodesk Licensing Services is a licensing service of the American company Autodesk. An Access Control Error vulnerability exists in Autodesk Licensing Services, which originates from a malicious user with restricted privileges can run any number of tools on the system to identify services...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a permissions licensing and access control issue, which arises from an application not properly securing the WiFi component. The following products and versions are...