Privilege escalation

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Agent Linux, macOS, Windows before build 29051...

CVE-2023-44209

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 29051, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-44209

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 29051, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-44209

CVE-2023-44209 affects Acronis Agent (Linux, macOS, Windows) prior to build 29051. Root cause is improper handling of soft links, enabling local privilege escalation with the stated impact on confidentiality, integrity, and availability. Documentation provides the affected product and build range...

Soft Serve Authorization Issues Vulnerability

Soft Serve is a delicious, self-hosted command-line Git server. An authorization issue vulnerability exists in Soft Serve versions prior to 0.6.2, which stems from a vulnerability that allows an attacker to bypass public key authentication via the allow-keyless setting...

PT-2023-5786

Name of the Vulnerable Software and Affected Versions Acronis Agent versions prior to build 29051 Description The issue is related to local privilege escalation due to improper soft link handling. This can allow an attacker to elevate their privileges. The estimated number of potentially affected...

Acronis Agent Security Vulnerability

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that originates from a local elevation of privilege due to improper handling of soft links...

CVE-2023-44209: Externally Controlled Reference to a Resource in Another Sphere

Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 29051, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-43809: Improper Authentication

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...

Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled

Impact A security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless setting, and the public key requires additional client-side verification for example...

GHSA-MC97-99J4-VM2V Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled

Impact A security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless setting, and the public key requires additional client-side verification for example...

PT-2023-6511 · Unknown · Soft Serve

Name of the Vulnerable Software and Affected Versions: Soft Serve versions prior to 0.6.2 Description: A security issue in Soft Serve allows an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...

GHSA-9HWP-CJ7M-WJW4 Mattermost Incorrect Authorization vulnerability

Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of...

Mattermost Incorrect Authorization vulnerability

Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of...

CVE-2023-5195

Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of...

Code injection

Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of...

CVE-2023-5195

CVE-2023-5195 affects Mattermost Server. The issue arises from improper permission validation when soft deleting a team, which can allow a team member to soft delete other teams they are not part of. The provided documents identify the vulnerable component (Mattermost server) and the root cause (...

CVE-2023-5195 A team member can soft delete other teams that they are not part of

Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of...

CVE-2023-5195

Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of...

CVE-2023-5195 A team member can soft delete other teams that they are not part of

Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of...