Incorrect permission check in gitlab-plugin allows enumerating credentials IDs

gitlab-plugin 1.9.6 and earlier does not correctly perform a permission check in an HTTP endpoint. This allows attackers with global Item/Configure permission while lacking Item/Configure permission on any particular job to enumerate credential IDs of GitLab API token credentials and Secret text...

CVE-2019-17375

cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated SEC-517...

The vulnerability of the access control service for remote catalogs and the authentication mechanism of the Astra Linux operating system allow a intruder to trigger a service failure.

The vulnerability of the access control service for remote catalogs and the authentication mechanism of the Astra Linux operating system is related to a flaw that causes domain users to be unable to obtain token credentials during authentication when they lose connection to the domain server...