1300 matches found
CVE-2024-22121
Technical details about CVE-2024-22121 are not publicly provided in the connected documents. Descriptions only state that a non-admin user can modify Zabbix Agent features. Monitor for updates from vendors and advisories.
CVE-2024-22121
A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...
Bitbucket Datacenter REST API allows non-admin users to query all groups and members of the group
h3. Issue Summary Non-admin users any licensed user can query all the groups and members of the groups using the below API Groups API|https://developer.atlassian.com/server/bitbucket/rest/v819/api-group-permission-management/api-api-latest-admin-groups-get Group memberships...
CVE-2024-6637
The WooCommerce - Social Login plugin for WordPress is vulnerable to unauthenticated privilege escalation in all versions up to, and including, 2.7.3. This is due to a lack of brute force controls on a weak one-time password. This makes it possible for unauthenticated attackers to brute force the...
CVE-2024-6150
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...
CVE-2024-6150
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...
CVE-2024-6150
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...
CVE-2024-6150
A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...
CVE-2024-6150
CVE-2024-6150 affects Citrix Provisioning. A non-admin user can cause short-term disruption of Target VM availability via Citrix Provisioning. Root cause per Citrix bulletin is improper access control. Mitigation: upgrade Citrix Provisioning to CR 2402+ or LTSR CU5 (2203 LTSR) / CU9 (1912 LTSR). ...
CVE-2024-37171
SAP Transportation Management Collaboration Portal allows an attacker with non-administrative privileges to send a crafted request from a vulnerable web application. This will trigger the application handler to send a request to an unintended service, which may reveal information about that...
SAP Transportation Management Code Issue Vulnerability
SAP Transportation Management is an integrated transportation fleet and logistics management application from SAP, Germany, that helps organizations reduce complexity, increase efficiency and agility to build a more sustainable and risk-resilient supply chain. A code issue vulnerability exists in...
ZTE ZXCLOUD iRAI Security Vulnerability
ZTE ZXCLOUD iRAI is a virtualization device from ZTE Corporation ZTE, China. A security vulnerability exists in ZTE ZXCLOUD iRAI V7.23.31 and earlier versions, which stems from the presence of a privilege and access control vulnerability that allows an attacker to elevate non-administrator...
PT-2024-37416 · Citrix · Citrix Provisioning
Name of the Vulnerable Software and Affected Versions: Citrix Provisioning affected versions not specified Description: A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning. Recommendations: At the moment, there is no information about a newer version...
PT-2024-9896 · Sap · Sap Transportation Management
Name of the Vulnerable Software and Affected Versions: SAP Transportation Management Collaboration Portal affected versions not specified Description: The issue allows an attacker with non-administrative privileges to send a crafted request from a vulnerable web application, triggering the...
CVE-2024-39708
An issue was discovered in the Agent in Delinea Privilege Manager formerly Thycotic Privilege Manager before 12.0.1096 on Windows. Sometimes, a non-administrator user can copy a crafted DLL file to a temporary directory used by .NET Shadow Copies such that privilege escalation can occur if the co...
PT-2024-28645 · Delinea · Delinea Privilege Manager
Name of the Vulnerable Software and Affected Versions: Delinea Privilege Manager versions prior to 12.0.1096 Description: A local privilege escalation issue was discovered in Delinea Privilege Manager, allowing a non-administrator user to potentially execute arbitrary code as SYSTEM by exploiting...
PT-2024-9958 · Ca · Ca Client Automation
Name of the Vulnerable Software and Affected Versions: CA Client Automation ITCM affected versions not specified Description: The issue is related to insecure privilege management in the CA Client Automation software, which allows non-admin or non-root users to encrypt strings using the CAF CLI a...
Exploit for Improper Privilege Management in Mitre Caldera
CVE-2021-42562: Improper Access Control in MITRE Caldera Cald...
CWA 2402 - Microsoft Teams VDI plugin is not shown for Non-Admin user
When installing Citrix Workspace app 2402 LTSR for Windows CWA or later version with Administrator privileges, all the three Add-ons single sign-on, App Protection, Microsoft Teams VDI plugin are shown. But if installing CWA 2402 with non-admin user, all the three Add-ons are not shown...