CVE-2023-5808

CVE-2023-5808 CVE-2023-5808 是 Hitachi NAS（HNAS）的 系统管理单元 （SMU）备份与恢复功能中发现的一个 不安全的直接对象引用 （IDOR ）漏洞。该漏洞影响 14.8.7825.01 之前版本的 SMU。 利用 此漏洞要求攻击者掌握一个非 只读 或 全局管理员 用户账户的凭据，即： 存储管理员 服务器管理员 服务器 + 存储管理员 根据设计，具有 全局管理员 角色的用户应能够访问 SMU 的 备份与恢复 功能，该功能位于...

CVE-2022-0027

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not hav...

Authorization

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not hav...

CVE-2022-0027

An improper authorization vulnerability in Palo Alto Network Cortex XSOAR software enables authenticated users in non-Read-Only groups to generate an email report that contains summary information about all incidents in the Cortex XSOAR instance, including incidents to which the user does not hav...