1083 matches found
Improper Access Control in snipe-it
Users with no system permissions are able to see and create personal access tokens...
Incorrect Default Permissions and Improper Access Control in snipe-it
snipe-it is vulnerable to Improper Access Control/Incorrect Default Permissions...
GHSA-W3V3-CXQ5-9VR4 Incorrect Default Permissions and Improper Access Control in snipe-it
snipe-it is vulnerable to Improper Access Control/Incorrect Default Permissions...
Privilege Escalation
snipe-it is vulnerable to privilege escalation. The vulnerability exists due to lack of santization of the auth controls on api key creation...
snipe-it Access Control Error Vulnerability (CNVD-2022-08381)
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, which stems from the presence of improper access controls in the software. No details of the vulnerability are currently available...
CVE-2022-0178
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...
CVE-2022-0178
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...
Authorization
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...
CVE-2022-0178
CVE-2022-0178 affects snipe-it (Snipe-IT). Multiple connected sources describe a Missing Authorization/ improper Access Control vulnerability where users with no system permissions can see and create personal access tokens. Affected versions are prior to 5.3.8. Remediation: update to 5.3.8 or lat...
CVE-2022-0178 Missing Authorization in snipe/snipe-it
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...
CVE-2022-0178 Missing Authorization in snipe/snipe-it
Missing Authorization vulnerability in snipe snipe/snipe-it.This issue affects snipe/snipe-i before 5.3.8...
Improper Access Control
snipe/snipe-it is vulnerable to Improper Access Control. The vulnerability allows a remote authenticated attacker to view, edit and delete asset model information with DENY permissions...
Snipe-IT 访问控制错误漏洞
Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, which stems from the presence of improper access controls in the software. No details of the vulnerability are currently available...
PT-2022-13014 · Snipe-It · Snipe-It
Name of the Vulnerable Software and Affected Versions: snipe-it versions prior to 5.3.8 Description: The issue affects snipe-it due to a Missing Authorization vulnerability, which is also described as an Improper Access Control vulnerability. This allows users with no system permissions to see an...
CVE-2022-0179
snipe-it is vulnerable to Missing Authorization...
CVE-2022-0179
snipe-it is vulnerable to Missing Authorization...
Authorization
snipe-it is vulnerable to Missing Authorization...
CVE-2022-0179
CVE-2022-0179 – snipe-it : A Missing Authorization flaw (faulty access control) in snipe-it, an open-source IT asset/license management system. The vulnerability is described with partial confidentiality/integrity impact (C:L/I:L) and no availability impact in the NVD metrics, and is classified u...
Snipe-IT 安全漏洞
Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in snipe-it that stems from faulty access control. No details of the vulnerability are provided at this time...