Lucene search
Veracode Vulnerability DatabaseVERACODE:33146HistoryDec 02, 2021 - 3:32 a.m.
Privilege Escalation
2021-12-0203:32:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
kevinpapst/kimai2
privilege escalation
invoicecontroller.php
permission checks
malicious user
invoices
EPSS
0.001
Percentile
26.1%
kevinpapst/kimai2 is vulnerable to privilege escalation. The vulnerability exists through the lack of permission checks in ‘InvoiceController.php’, allowing a malicious user to access invoices without read permissions.
Related
github
github
kimai2 is vulnerable to Improper Access Control
2021-12-03 20:42:59
cve
cve
CVE-2021-3992
2021-12-01 11:15:08
osv
osv
CVE-2021-3992
2021-12-01 11:15:08
kimai2 is vulnerable to Improper Access Control
2021-12-03 20:42:59
prion
prion
Improper access control
2021-12-01 11:15:00
huntr
huntr
Improper Access Control in kevinpapst/kimai2
2021-11-20 06:56:03
nvd
nvd
CVE-2021-3992
2021-12-01 11:15:08
cvelist
cvelist
CVE-2021-3992 Improper Access Control in kevinpapst/kimai2
2021-12-01 10:45:11
cnvd
cnvd
kimai2 access control error vulnerability
2021-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: wireshark-3.6.0-1.fc34
2021-12-03 01:34:18
[SECURITY] Fedora 35 Update: wireshark-3.6.0-1.fc35
2021-12-03 01:16:50