CVE-2022-22251

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX softwa...

Design/Logic Flaw

On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks Junos OS allows a local, low-privileged attacker to elevate their permissions to take control of any instance of a cSRX softwa...

CVE-2022-22251

Summary: CVE-2022-22251 affects Juniper Networks Junos OS on cSRX Series. The root cause is software permission issues in the container filesystem and stored files, combined with storing passwords in a recoverable format, enabling a local, low-privileged attacker to elevate privileges and take co...

PT-2022-5204 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 20.2R1 through 21.2R1 on cSRX Series Description: The issue is related to software permission problems in the container filesystem and stored files, combined with the storage of passwords in a recoverable...

Juniper Junos OS Vulnerability (JSA69908)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69908 advisory. - On cSRX Series devices software permission issues in the container filesystem and stored files combined with storing passwords in a recoverable format in Juniper Networks...

Microsoft Azure Site Recovery 权限许可和访问控制问题漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from the U.S. company Microsoft for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery has an elevation of privilege vulnerability that could be exploited by an attacker to gain elevated privileges on the system...

Microsoft Windows Internet Information Services 权限许可和访问控制问题漏洞

Microsoft Windows Internet Information Services IIS is a Web server from Microsoft Corporation for the Windows Server platform. A vulnerability exists in Microsoft Windows Internet Information Services with privilege permission and access control issues. The following products and editions are...

Microsoft Azure Site Recovery 权限许可和访问控制问题漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation USA. Microsoft Azure Site Recovery has an elevation of privilege vulnerability, and no details of the vulnerability are available...

CVE-2022-31032 Resources of private projects can be exposed in Tuleap

Tuleap is a Free & Open Source Suite to improve management of software developments and collaboration. In versions prior to 13.9.99.58 authorizations are not properly verified when creating projects or trackers from projects marked as templates. Users can get access to information in those templa...

Google Android 权限许可和访问控制问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to permission and access control issues, which can be exploited by attackers to cause local privilege escalation...

Apple macOS Monterey 输入验证错误漏洞

Apple macOS Monterey is the 18th major version of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey. An attacker has exploited the vulnerability to delete files to which it does not have permission...

CVE-2020-14496 Mitsubishi Electric Multiple Factory Automation Engineering Software Products (Update A) - Permission Issues

Successful exploitation of this vulnerability for multiple Mitsubishi Electric Factory Automation Engineering Software Products of various versions could allow an attacker to escalate privilege and execute malicious programs, which could cause a denial-of-service condition, and allow information ...

GHSA-9QP4-79Q8-58PR Ipsilon denial of service by deleting a SAML2 Service Provider (SP)

providers/saml2/admin.py in the Identity Provider IdP server in Ipsilon 0.1.0 before 1.0.2 and 1.1.x before 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider SP...

Microsoft Windows Ancillary Function Driver for WinSock权限许可和访问控制问题漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock due to permission and access control issues. The following products and editions are...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Google Android 权限许可和访问控制问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has an elevation of privilege vulnerability that can be exploited by local attackers to cause local privilege escalation...

Microsoft Windows Security Account Manager Privilege Permission and Access Control Issues Vulnerability

Microsoft Windows Security Account Manager is a Windows security account manager from Microsoft USA for storing user passwords. It can be used to authenticate local and remote users. Microsoft Windows Security Account Manager is vulnerable to privilege permission and access control issues. No...

Design/Logic Flaw

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web portal of Secomea GateManager allows logged in LinkManager user to access stored SiteManager backup files...

Microsoft Windows NT OS Kernel 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows NT OS Kernel with privilege permission and access control issues. The following products and editions are affected: Windows Server...

Microsoft Azure Site Recovery 权限许可和访问控制问题漏洞

Microsoft Azure Site Recovery is a site recovery DRaaS from Microsoft Corporation for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery is vulnerable to privilege permission and access control issues. No details of the vulnerability are available at this time...