17 matches found
CVE-2026-55632
GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-preference configuration returns its users-and-roles mode to regular authenticated users without requiring an...
CVE-2026-94536 lamp-cloud through 5.10.0 Unauthorized Information Disclosure via /anyone/visible/resource
lamp-cloud through 5.10.0 fails to validate the employeeId parameter in the /anyone/visible/resource endpoint, allowing authenticated users to read any employee's roles and permissions. Attackers can supply arbitrary employeeId values to enumerate other employees' role codes, permission codes, an...
CVE-2026-94536
lamp-cloud through version 5.10.0 is affected by an unauthorized information disclosure vulnerability in the /anyone/visible/resource endpoint within the lamp-oauth module. The root cause is a missing authorization check on the employeeId parameter in ResourceController.java, which allows any aut...
CVE-2026-85210
Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with openaccess, allowing any registered user to enumerate privileged accounts and roles. Attackers can query the endpoint with filtercriterion parameters to retrieve usernames holding specific roles, banned flags, an...
CVE-2026-85210 Oppia through 3.5.2 Missing Authorization on AdminRoleHandler GET
Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with openaccess, allowing any registered user to enumerate privileged accounts and roles. Attackers can query the endpoint with filtercriterion parameters to retrieve usernames holding specific roles, banned flags, an...
GHSA-CVW4-55PP-3HFQ Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Summary Missing authorization checks on three IAM API endpoints GET /api/roles, GET /api/roles/name, GET /api/privileges allow any authenticated user — regardless of their assigned permissions — to enumerate the complete list of system privileges and role definitions. An attacker with only a...
Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Summary Missing authorization checks on three IAM API endpoints GET /api/roles, GET /api/roles/name, GET /api/privileges allow any authenticated user — regardless of their assigned permissions — to enumerate the complete list of system privileges and role definitions. An attacker with only a...
Missing Authorization
Overview Affected versions of this package are vulnerable to Missing Authorization via the IamApi endpoints responsible for role and privilege enumeration. An attacker can access sensitive security configuration data by sending authenticated requests to GET /api/roles, GET /api/roles/name, or GET...
CVE-2026-55547 Yamcs: Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET...
CVE-2026-55547
CVE-2026-55547 affects Yamcs , a mission control framework, in versions prior to 5.12.8 and 5.13.2 . The root cause is missing SystemPrivilege.ControlAccess authorization checks in three IAM API endpoints (GET /api/roles, GET /api/roles/{name}, GET /api/privileges) within IamApi.java. Any authent...
CVE-2026-55547 Yamcs: Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET...
CVE-2026-55547 Yamcs: Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration
Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs omits SystemPrivilege.ControlAccess checks from IamApi.listRoles, IamApi.getRole, and IamApi.listPrivileges in yamcs-core/src/main/java/org/yamcs/http/api/IamApi.java. Any authenticated account can call GET /api/roles, GET...
PT-2026-71212
Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.39.25 Description An issue exists where the 'GET /api/global/groups' endpoint fails to verify if the user has builder or administrator privileges. This allows an authenticated user with a BASIC role to enumerate...
CVE-2026-10750
The Royal MCP WordPress plugin, in versions prior to 1.4.26 , suffers from an insufficient authorization vulnerability. The plugin fails to perform necessary capability checks on the majority of its MCP tools following token authentication. This allows authenticated users with low-privileged role...
PT-2026-33792
A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint...
Products.PluggableAuthService 信息泄露漏洞
Jens Vagelpohl Products.PluggableAuthService is an open source application by Jens Vagelpohl. The product defines a fully pluggable user folder for use by all Zope sites. An information disclosure vulnerability exists in Products.PluggableAuthService that allows anyone to list the names of roles...
