CVE-2010-5108

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...

CVE-2010-5108

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...

PT-2019-6596

Name of the Vulnerable Software and Affected Versions Trac version 0.11.6 Description The issue allows an attacker to modify a ticket's status and resolution without proper permissions due to inadequate workflow permission checks. Recommendations For Trac version 0.11.6, update to a newer version...

CVE-2010-5108: Incorrect Default Permissions

Trac 0.11.6 does not properly check workflow permissions before modifying a ticket. This can be exploited by an attacker to change the status and resolution of tickets without having proper permissions...

openstack-mistral information disclosure vulnerability

openstack-mistral is a workflow service for the OpenStack cloud. The product focuses on providing mechanisms for managing and executing tasks/workflows without the need to code, manage and execute them in a cloud environment. An information disclosure vulnerability exists in openstack-mistral,...

The vulnerability of the Worklist sub-component of the Oracle Workflow component in the Oracle E-Business Suite automation system allows a perpetrator to gain access to modify, add, or delete data, or to unauthorizedly access protected information.

The vulnerability of the Worklist sub-component of the Oracle Workflow component in the Oracle E-Business Suite automation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker operating remotely to modify, add, or delete data, or gain...

Missing HTTP Security Headers in NetApp OnCommand Workflow Automation - US

Lenovo Security Advisory: LEN-29480 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5503 Summary Description: NetApp reported that OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers...

CVE-2013-1930

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

Design/Logic Flaw

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

CVE-2013-1930

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

CVE-2013-1930

CVE-2013-1930 affects MantisBT 1.2.12 prior to 1.2.15, enabling authenticated users to bypass the workflow restriction and close issues. Root cause details are not provided beyond the bypass of workflow checks. Impact is limited to issue state manipulation by authenticated users; no exploitation ...

CVE-2013-1930

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

CVE-2013-1930

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

CVE-2013-1930: Improper Input Validation

MantisBT 1.2.12 before 1.2.15 allows authenticated users to by the workflow restriction and close issues...

PT-2019-6861

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.12 through 1.2.14 Description The issue allows authenticated users to bypass the workflow restriction and close issues. Recommendations For MantisBT versions 1.2.12 through 1.2.14, update to version 1.2.15 or later to...

Oracle E-Business Suite Multiple Vulnerabilities (Oct 2019 CPU)

The version of Oracle E-Business installed on the remote host is missing the October 2019 Oracle Critical Patch Update CPU. It is, as noted in the October 2019 Critical Patch Update advisory, affected by flaws in the following components : - Oracle Advanced Outbound Telephony - Oracle Application...

CVE-2019-2925

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

Design/Logic Flaw

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

CVE-2019-2925

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...

CVE-2019-2925

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Worklist. Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful...