Basecamp: A third-party Basecamp OAuth token mints a full launchpad web session through GET /my/login_option

A third-party OAuth token was able to mint a full web session through an API endpoint, allowing an integration to obtain unauthorized session access and modify account settings. The vulnerability has been patched to only accept authorized session tokens...

CVE-2022-2568

A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges...

CVE-2022-2568

A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges...

CVE-2022-2568

A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges...

PT-2019-17799

Name of the Vulnerable Software and Affected Versions Computing For Good's Basic Laboratory Information System C4G BLIS versions 3.5 and earlier Description The issue is related to improper access control, allowing an unauthenticated user to modify user account settings, including promoting any...