Improper Authorization

Snipe-IT is vulnerable to Improper Authorization. The vulnerability is due to improper handling of missing permission fields during user updates, where existing permissions can be unintentionally overwritten with a sparse permission set, allowing authorized users to remove administrative or...

samba: Incorrect ACL get/set allowed on symlink path

A flaw was found in the way Samba handled ACLs on symbolic links. An authenticated user could use this flaw to gain access to an arbitrary file or directory by overwriting its ACL...