Information disclosure

Dell Trusted Device Agent, versions prior to 5.3.0, contains an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges...

CVE-2023-25542

Dell Trusted Device Agent, versions prior to 5.3.0, contains an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges...

CVE-2023-25542

Dell Trusted Device Agent prior to 5.3.0 has an improper installation permissions vulnerability that could allow an unauthenticated local attacker to gain escalated privileges. Affected product: Dell Trusted Device Agent (Windows/Linux agents referenced across sources). Root cause: incorrect inst...

CVE-2023-25542

Dell Trusted Device Agent, versions prior to 5.3.0, contains an improper installation permissions vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to escalated privileges...

PT-2023-20150 · Dell · Dell Trusted Device Agent

Name of the Vulnerable Software and Affected Versions: Dell Trusted Device Agent versions prior to 5.3.0 Description: The issue is related to improper installation permissions, allowing an unauthenticated local attacker to potentially exploit it and gain escalated privileges. Recommendations: For...

Dell Trusted Device Agent 访问控制错误漏洞

Dell Trusted Device Agent is an agent program from Dell USA. An Access Control Error vulnerability exists in Dell Trusted Device Agent versions prior to 5.3.0, which stems from the program containing incorrect installation permissions and can be exploited by an attacker to gain elevation of...

Nextcloud 日志信息泄露漏洞

An information disclosure vulnerability exists in Nextcloud Server, an open source, powerful cloud storage network drive project. An attacker could use this vulnerability to bypass the dual authentication in Nextcloud, and an attacker who knows the password or has access to the WebAuthN trusted...

Information Disclosure

magento/community-edition is vulnerable to information disclosure. The vulnerability exists as an admin is able to view metadata of a trusted device that is used by another admin...

Vulnerability to bypass two-factor authentication with unverified JWT trusted device token

Before version 3.7 the bundle is vulnerable to a security issue in JWT, which can be exploited by an attacker to generate trusted device cookies on their own, effectively by-passing two-factor authentication. Please either disable the trusted feature in your application or upgrade to a bundle...

Vulnerability to bypass two-factor authentication with unverified JWT trusted device token

Before version 3.7 the bundle is vulnerable to a security issue in JWT, which can be exploited by an attacker to generate trusted device cookies on their own, effectively by-passing two-factor authentication. Please either disable the trusted feature in your application or upgrade to a bundle...

Samsung Smart TV Wi-Fi Direct Elevation of Privilege Vulnerability

Samsung SmartTV is a smart TV from Samsung South Korea that integrates web content, Apps apps, AllShare content, search function and traditional TV channel listings into one user interface. An elevation of privilege vulnerability exists in Samsung Smart TV Wi-Fi Direct, which allows an attacker t...

Android elevation of privilege vulnerability (CNVD-2016-04681)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Bluetooth is a component. A power lifting vulnerability exists in Android's Bluetooth. A local attacker can exploit this vulnerability to add an authorized Bluetooth devi...