Puppet CD4PE security vulnerability

Puppet is a set of configuration management tools based on client/server C/S architecture from Puppet Labs, which can be used to manage configuration files, users, cron tasks, packages, system services, etc. Puppet Enterprise is the enterprise version of Puppet. An access control error...

Microsoft Azure Real Time Operating System: Permissions, Licensing, and Access Control Vulnerabilities

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA.A privilege permission and access control issue vulnerability exists in Microsoft Azure RTOS. The vulnerability stems from a lack of effective privilege permission and access control measures on t...

Microsoft Windows AppContainer permission licensing and access control vulnerabilities

Microsoft Windows AppContainer is a sandboxing mechanism by Microsoft Corporation USA to control which resources UWP applications can or cannot access. A vulnerability exists in Microsoft Windows AppContainer with privilege permission and access control issues. The following products and editions...

CVE-2021-31843

Improper privileges management vulnerability in McAfee Endpoint Security ENS Windows prior to 10.7.0 September 2021 Update allows local users to access files which they would otherwise not have access to via manipulating junction links to redirect McAfee folder operations to an unintended locatio...

Microsoft Windows Common Log File System Driver permission and access control vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Microsoft Windows Auxiliary Function Driver for WinSock: Permissions and access control issues

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock due to privilege-granting and access control issues. The following products and edition...

Microsoft Windows Print Spooler Components permission and access control vulnerabilities

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected: Windows...

Microsoft Windows Common Log File System Driver permission and access control vulnerabilities

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

Modbus Protocol Implementation

The vulnerability of the Modbus protocol implementation in microprogrammed logic controllers like Modicon Quantum is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to cause service failures or unauthorized changes to the PLC’s configuration...

Apple macOS: Permissions and access control issues

Apple macOS is a suite of specialized operating systems developed for Mac computers by Apple Inc. in the United States. A vulnerability exists in Apple macOS Monterey prior to version 12.0.1 with privilege permission and access control issues that could allow a malicious application to bypass...

Sapphire IMS Permission Authorization and Access Control Vulnerabilities

Tecknodreams SapphireIMS is an ITIL 2011 certified Enterprise Service Management System from Tecknodreams India. Sapphire IMS 5.0 suffers from a Privilege Permission and Access Control Issues vulnerability that stems from the fact that in SapphireIMS 5.0, local administrators can be created on an...

HMI3 Control Panel Trust Management Vulnerability

Swisslog Healthcare Nexus Panel is a medical device from Swisslog Healthcare.A security vulnerability exists in the HMI3 Control Panel, which stems from an insecure privilege issue in the HMI3 Control Panel of the Swisslog Healthcare Nexus. No details of the vulnerability are currently available...

Apple macOS Big Sur Permission Issues and Access Control Vulnerabilities

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from a Permission Permission and Access Control Issue vulnerability that stems from an incorrect security restriction in Sandbox. The vulnerability allows a native application to bypass pre-existing...

SolarWinds DameWare Mini Remote Control: Permissions and access control issues

Solarwinds SolarWinds DameWare Mini Remote Control is a remote control software and desktop sharing tool from SolarWinds USA. A privilege permission and access control issue vulnerability exists in SolarWinds DameWare Mini Remote Control Server, which stems from insecure file permissions that all...

IBM Security Access Manager input validation vulnerability

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker is vulnerable to a privilege permission and...

Joomla permissions and access control issues

Joomla is an open source, cross-platform content management system CMS developed using PHP and MySQL by the U.S. Open Source Matters team. A vulnerability exists in Joomla! Core 1.5.15 and prior versions 1.5.x in regards to privilege permission and access control issues. The vulnerability arises...

SAP Process Integration Resource Management Vulnerability

SAP Process Integration is a middleware provided by SAP Germany that enables SAP to seamlessly integrate with non-SAP applications in the company or with systems external to the company. A privilege permission and access control issue vulnerability exists in SAP Process Integration versions 7.10,...

Centreon Web Security Vulnerabilities

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . An upload bypass vulnerability exists in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2, which...

CVE-2021-24197

The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to access the data of another user that are present in the same table by takin...

OTRS AG OTRSCIsInCustomerFrontend: Vulnerabilities related to permission licensing and access control

OTRS AG OTRSCIsInCustomerFrontend is a management system from OTRS USA. It provides modern, flexible ticket and process management services. A security vulnerability exists in OTRSCIsInCustomerFrontend that originates from viewing linked configuration items, which are defined in a common director...