Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

Audit

Plug-in).

Supported

versions

that

are

affected

are

and

prior

and

and

prior.

Easily

exploitable

vulnerability

allows

high

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data

as

well

as

unauthorized

read

access

to

a

subset

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).


Vulnerability

in

the

Oracle

JDeveloper

and

ADF

product

of

Oracle

Fusion

Middleware

(component:

OAM).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

high

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

JDeveloper

and

ADF.

Successful

attacks

require

human

interaction

from

a

person

other

than

the

attacker.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

read

access

to

a

subset

of

Oracle

JDeveloper

and

ADF

accessible

data.

CVSS

Base

Score

(Confidentiality

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N).


Vulnerability

in

the

MySQL

Server

component

of

Oracle

MySQL

(subcomponent:

Server:

Security:

Privileges).

Supported

versions

that

are

affected

are

and

prior.

Easily

exploitable

vulnerability

allows

high

privileged

attacker

with

network

access

via

multiple

protocols

to

compromise

MySQL

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

update

insert

or

delete

access

to

some

of

MySQL

Server

accessible

data.

CVSS

Base

Score

(Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).


Vulnerability

in

the

Oracle

WebLogic

Server

component

of

Oracle

Fusion

Middleware

(subcomponent:

WLS

Core

Components).

Supported

versions

that

are

affected

are

and

Easily

exploitable

vulnerability

allows

high

privileged

attacker

with

network

access

via

HTTP

to

compromise

Oracle

WebLogic

Server.

Successful

attacks

of

this

vulnerability

can

result

in

unauthorized

access

to

critical

data

or

complete

access

to

all

Oracle

WebLogic

Server

accessible

data

as

well

as

unauthorized

update

insert

or

delete

access

to

some

of

Oracle

WebLogic

Server

accessible

data.

CVSS

Base

Score

(Confidentiality

and

Integrity

impacts).

CVSS

Vector:

(CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N).


IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores highly sensitive information in cleartext that could be obtained by a user. IBM X-Force ID: 179004.


Extreme EXOS 15.7 16.x 21.x and 22.x allows remote attackers to hijack sessions by determining SessionID values.


Session fixation vulnerability in the Workplace (aka WP) component in IBM FileNet P8 Application Engine (P8AE) 4.0.2.x before 4.0.2.7-P8AE-FP007 allows remote attackers to hijack web sessions via unspecified vectors.


Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.


Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.


Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server.


Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.


PendingIntent hijacking vulnerability in DataUsageReminderReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.

hijacking vulnerability
access file without permission


PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

hijacking vulnerability
unauthorized action without permission


PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.


DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022_4 allows attacker to execute abitrary code.

hijacking vulnerability
execute arbitrary code


DLL hijacking vulnerability in Kies prior to version 2.6.4.22014_2 allows attacker to execute abitrary code.


PendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.


PendingIntent hijacking vulnerability in KnoxPrivacyNoticeReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission via implicit Intent.


DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch adds proper absolute path to prevent dll hijacking.

dll hijacking vulnerability
arbitrary code execution


The

wp-support-plus-responsive-ticket-system

plugin

before

for

WordPress

has

HTML

injection.


IBM QRadar 7.3 7.4 and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756.

impersonate actor without entity authentication


In all versions of GitLab CE/EE since version 8.0 when an admin uses the impersonate feature twice and stops impersonating the admin may be logged in as the second user they impersonated which may lead to repudiation issues.


IBM WebSphere Portal 7.0 8.0 8.5 and 9.0 may fail to set the correct user context in certain impersonation scenarios which can allow a user to act with the identity of a different user. IBM X-Force ID: 144958.


In all android releases (Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper validation of array index in WMA roam synchronization handler can lead to OOB write.


In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615 MDM9625 SD 210/SD 212/SD 205 SD 400 and SD 800 improper access control on ATCMD service allows third party services to access without user knowledge.


In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 425 SD 430 SD 450 SD 625 and SD 650/52 there is improper access control to a bus.


In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845 SD 850 improper access control while configuring MPU protecting error correction registers may potentially lead to exposure of related secured data.


Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages which allows local users to write to arbitrary files via crafted messages aka Bug ID CSCus79392.


IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0 19.0 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607.


Improper

Access

Control

for

RPU

write

access

from

secure

processor

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

Electronics

Connectivity

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wired

Infrastructure

and

Networking

in

Nicobar


The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20 from version 6.0.0 before version 6.0.12 from version 6.1.0 before version 6.1.2 from version 7.0.0 before version 7.0.1 and from version 7.1.0 before version 7.1.3 allows remote attackers who have obtained access to administrator's session to access the EditApplinkServlet resource without needing to re-authenticate to pass \WebSudo\ in products that support \WebSudo\ through an improper access control vulnerability.


IBM InfoSphere Information Server 9.1 11.3 11.5 and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526.


IBM InfoSphere Information Server 11.3 11.5 and 11.7 could allow an attacker to change one of the settings related to InfoSphere Business Glossary Anywhere due to improper access control. IBM X-Force ID: 152528.


snipe-it is vulnerable to Improper Access Control


In PrestaShop between versions 1.7.0.0 and 1.7.6.5 there are improper access controls on product page with combinations attachments and specific prices. The problem is fixed in 1.7.6.5.


In PrestaShop between versions 1.5.5.0 and 1.7.6.5 there is improper access control on customers search. The problem is fixed in 1.7.6.5.


\In PrestaShop between versions 1.7.0.0 and 1.7.6.5 there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5.


In PrestaShop from version 1.5.0.0 and before version 1.7.6.6 there is improper access control in Carrier page Module Manager and Module Positions. The problem is fixed in version 1.7.6.6


IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.


IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls. IBM X-Force ID: 125456.


IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2 6.0.0.0 through 6.0.3.2 and 6.1.0.0 could allow an authenticated user to create a privileged account due to improper access controls. IBM X-Force ID: 188896.


IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due to improper access control. IBM X-Force ID: 120274.


IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files caused by improper access controls. IBM X-Force ID: 199397.


IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567.


IBM UrbanCode Deploy (UCD) 6.1 and 6.2 could allow an authenticated user to edit objects that they should not have access to due to improper access controls. IBM X-Force ID: 128691.


CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper access control can lead to device node and executable to be run from /firmware/ which presents a potential issue.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper access control can lead to device node and executable to be run from /data/ which presents a potential issue.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper access control can lead to device node and executable to be run from /persist/ which presents a potential issue.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper access control can lead to device node and executable to be run from /systemrw/ which presents a potential security.


A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated remote attacker to access sensitive configuration information. The vulnerability is due to improper access control to files within the web UI. An attacker could exploit this vulnerability by sending a malicious request to an affected device. A successful exploit could allow the attacker to gain access to sensitive configuration information.

improper access control
weak authentication management


There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause temporary DoS.


ColdFusion versions ColdFusion 2016 and ColdFusion 2018 have an improper access control vulnerability. Successful exploitation could lead to system file structure disclosure.


In Ifme versions v5.0.0 to v7.32 are vulnerable against an improper access control which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete loss of admin access to Ifme.


In OpenEMR versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user which leads to a malicious user able to read and send sensitive messages on behalf of the victim user.


Advantech WebAccess/SCADA Versions 8.3.5 and prior. An improper access control vulnerability may allow an attacker to cause a denial-of-service condition.


In CLA-Assistant versions before 2.8.5 due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application.


Improper access control in mail module (channel partners) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier allows remote authenticated users to subscribe to arbitrary mail channels uninvited.


Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier allows remote authenticated users with access to contact management to modify user accounts leading to privilege escalation.


Improper access control in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows remote authenticated users to modify translated terms which may lead to arbitrary content modification on translatable elements.


Improper access control in mail module (notifications) in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier allows remote authenticated users to obtain access to arbitrary messages in conversations they were not a party to.


Improper access control in Nextcloud Talk 6.0.3 leaks the existance and the name of private conversations when linked them to another shared item via the projects feature.


Improper access control in GitLab CE/EE version 10.5 and above allowed subgroup members with inherited access to a project from a parent group to still have access even after the subgroup is transferred


Improper Access Control in GitHub repository zulip/zulip prior to 4.10.


Improper access control in GitLab EE versions 13.11.6 13.12.6 and 14.0.2 allows users to be created via single sign on despite user cap being enabled


Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller.


Improper access control in Management screen of EC-CUBE 2 series 2.11.2 to 2.17.1 allows a remote authenticated attacker to bypass access restriction and to alter System settings via unspecified vectors.


Improper Access Control in Thales Sentinel Protection Installer could allow a local user to escalate privileges.


Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication.


Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in specific condition.


Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files.


Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code.


Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password.


Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent.


Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in specific condition.


Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database.


Improper

access

control

in

Jfinal

CMS

allows

attackers

to

access

sensitive

information

via

/classes/conf/db.properties&config=filemanager.config.js.


Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.


Improper access control in Gitlab CE/EE versions 12.7 to 14.5.4 14.6 to 14.6.4 and 14.7 to 14.7.1 allowed for project non-members to retrieve issue details when it was linked to an item from the vulnerability dashboard.


Improper Access Control in Pypi calibreweb prior to 0.6.16.


Improper Access Control in GitHub repository salesagility/suitecrm prior to 7.12.5.


Improper Access Control in GitHub repository publify/publify prior to 9.2.8.


Improper Access Control in Packagist microweber/microweber prior to 1.2.11.


Improper Access Control in Packagist librenms/librenms prior to 22.2.0.


Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.


Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.


Improper access control in GitLab CE/EE versions 12.4 to 14.5.4 14.5 to 14.6.4 and 12.6 to 14.7.1 allows project non-members to retrieve the service desk email address


Improper Access Control in GitHub repository snipe/snipe-it prior to 5.4.4.


Improper access control in GitLab CE/EE versions 10.7 prior to 14.7.7 14.8 prior to 14.8.5 and 14.9 prior to 14.9.2 allows a malicious actor to obtain details of the latest commit in a private project via Merge Requests under certain circumstances


Improper Access Control in GitHub repository phpipam/phpipam prior to 1.4.6.


Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in version SD 845 SD 850.


Improper Access Control in Multimedia in Snapdragon Mobile and Snapdragon Wear Non-standard applications without permission may acquire permission of Qualcomm-specific proprietary intents.


Improper access control in the Discuss App of Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database via a crafted RPC request.


Improper access control in message routing in Odoo Community 12.0 and earlier and Odoo Enterprise 12.0 and earlier allows remote authenticated users to create arbitrary records via crafted payloads which may allow privilege escalation.


Improper access control in the Helpdesk App of Odoo Enterprise 10.0 through 12.0 allows remote authenticated attackers to obtain elevated privileges via a crafted request.


Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.


Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves.


Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.


Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.


Improper access control in Citrix XenMobile Server 10.12 before RP3 Citrix XenMobile Server 10.11 before RP6 Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality.


Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root.


Improper access control in Nextcloud Deck 1.0.0 allowed an attacker to inject tasks into other users decks.


Improper access control in Citrix XenMobile Server 10.12 before RP2 Citrix XenMobile Server 10.11 before RP4 Citrix XenMobile Server 10.10 before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files.


Improper

Access

Control

in

Jfinal

CMS

and

earlier

allows

remote

attackers

to

obtain

sensitive

information

via

the

'FileManager.editFile()'

function

in

the

component

'modules/filemanager/FileManagerController.java'.


Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the component 'jfinal_cms/admin/folder/list'.


Improper

Access

Control

in

Jfinal

CMS

and

earlier

allows

remote

attackers

to

obtain

sensitive

infromation

via

the

'getFolder()'

function

in

the

component

'/modules/filemanager/FileManager.java'.


Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and access the underlying operating system.


Improper Access Control in Plex Media Server prior to June 15 2020 allows any origin to execute cross-origin application requests.


Improper Access Control in Teltonika firmware TRB2_R_00.02.04.01 allows a low privileged user to perform unauthorized write operations.


Improper access controls in System Management Unit (SMU) may allow for an attacker to override performance control tables located in DRAM resulting in a potential lack of system resources.


Improper access controls in the B. Braun Melsungen AG SpaceCom Version L81/U61 and earlier and the Data module compactplus Versions A10 and A11 enables attackers to extract and tamper with the devices network configuration.


The affected product is vulnerable to an improper access control which may allow an authenticated user to gain unauthorized access to sensitive data.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel improper access control can lead to device node and executable to be run from /cache/ which presents a potential issue.


In all versions of GitLab CE/EE since version 14.1 an improper access control vulnerability allows users with expired password to still access GitLab through git and API through access tokens acquired before password expiration.


IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.8 could potentially disclose highly sensitive information to a privileged user due to improper access controls. IBM X-Force ID: 174956.


In GitLab before 13.0.12 13.1.6 and 13.2.3 improper access control was used on the Applications page


Improper access control vulnerability in Configuration tool in McAfee Endpoint Security (ENS) Prior to 10.6.1 October 2019 Update allows local user to gain access to security configuration via unauthorized use of the configuration tool.


OSIsoft PI Vision All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control which may return unauthorized tag data when viewing analysis data reference attributes.


Improper access control exists on PHOENIX CONTACT FL NAT 2208 devices before V2.90 and FL NAT 2304-2GC-2SFP devices before V2.90 when using MAC-based port security.


A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below DIVAR IP 2000 3000 5000 and 7000 Configuration Manager Building Integration System (BIS) with Video Engine Access Professional Edition (APE) Access Easy Controller (AEC) Bosch Video Client (BVC) and Video SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective library fixes the issue. The issue is classified as \CWE-284: Improper Access Control.\ This vulnerability for example allows a potential attacker to delete video or read video data.


Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage.


Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284 \Improper Access Control.\ As a result an unauthenticated user may alter several facets of a user account including promoting any user to an administrator.


Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.4 and earlier suffers from an instance of CWE-284 \Improper Access Control.\ As a result an unauthenticated user may change the password of any administrator-level user.


An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.


An exploitable improper access control vulnerability exists in the bluetooth low energy functionality of Winco Fireworks FireFly FW-1007 V2.0. An attacker can connect to the device to trigger this vulnerability.


Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284 \Improper Access Control.\ As a result an unauthenticated user may enumerate the user names and facility names in use on a particular installation.


eQ-3 Homematic CCU3 AddOn 'Mediola NEO Server for Homematic CCU3' prior to 2.4.5 allows uncontrolled admin access to start or stop the Node.js process resulting in the ability to obtain mediola configuration details. This is related to improper access control for addons configuration pages and a missing check in rc.d/97NeoServer.


Improper access control and open directories in Ivanti LANDESK Management Suite (LDMS aka Endpoint Manager) 10.0.1.168 Service Update 5 may lead to remote disclosure of administrator passwords.


An issue was discovered in GitLab Community and Enterprise Edition 8.13 through 11.11. Restricted users could access the metadata of private milestones through the Search API. It has Improper Access Control.


An issue was discovered in GitLab Community and Enterprise Edition 11.9 through 11.11. Unprivileged users were able to access labels status and merge request counts of confidential issues via the milestone details page. It has Improper Access Control.


u'Improper access control can lead signed process to guess pid of other processes and access their address space' in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Wired Infrastructure and Networking in Bitra Nicobar QCS605 QCS610 Rennell SA6155P Saipan SC7180 SC8180X SDM670 SDM710 SDM845 SDM850 SM6150 SM7150 SM8150 SM8250 SXR1130 SXR2130


A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's configuration or triggering and restoring backups. In order to exploit the vulnerability the adversary needs to have successfully paired an app or service which requires user interaction.


Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates stored in the underlying Microsoft Windows operating system. The fixed versions implement modified authentication checks. Prior releases of VRM software version 3.70 are considered unaffected. This vulnerability affects VRM v3.70.x v3.71 < v3.71.0034 and v3.81 < 3.81.0050; DIVAR IP 5000 3.80 < 3.80.0039; BVMS all versions using VRM.


Improper access control in the computed fields system of the framework of Odoo Community 13.0 and Odoo Enterprise 13.0 allows remote authenticated attackers to access sensitive information via crafted RPC requests which could lead to privilege escalation.


A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup. In order to exploit the vulnerability the adversary needs to download the backup directly after a backup triggered by a legitimate user has been completed.


Improper access control in mail module (followers) in Odoo Community 13.0 and earlier and Odoo Enterprise 13.0 and earlier allows remote authenticated users to obtain access to messages posted on business records there were not given access to and subscribe to receive future messages.


An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is installed. All GOG Galaxy versions before 1.2.60 and all corresponding versions of GOG Galaxy 2.0 Beta are affected.


eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.***Metadata related operations resulting in the ability to read set and deletion of Metadata.


eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access resulting in the ability to obtain VPN profile details shutting down the VPN service and to delete the VPN service configuration. This is related to improper access control for all /addons/mh/ pages.


The ViewUpgrades resource in Jira before version 7.13.4 from version 8.0.0 before version 8.0.4 and from version 8.1.0 before version 8.1.1 allows remote attackers who have obtained access to administrator's session to access the ViewUpgrades administrative resource without needing to re-authenticate to pass \WebSudo\ through an improper access control vulnerability.


Rapid7 Insight Agent versions prior to 3.1.3 suffer from an improper access control vulnerability whereby the user has access to the snapshot directory. An attacker can access read and copy any of the files in this directory e.g. asset_info.json or file_info.json leading to a loss of confidentiality. This issue was fixed in Rapid7 Insight Agent 3.1.3.


Improper access control in the GitLab CE/EE API affecting all versions starting from 9.4 before 14.3.6 all versions starting from 14.4 before 14.4.4 all versions starting from 14.5 before 14.5.2 allows an author of a Merge Request to approve the Merge Request even after having their project access revoked


Improper access control in GitLab CE/EE affecting all versions starting from 10.7 before 14.3.6 all versions starting from 14.4 before 14.4.4 all versions starting from 14.5 before 14.5.2 allows an attacker in possession of a deploy token to access a project's disabled wiki.


Improper access control allows any project member to retrieve the service desk email address in GitLab CE/EE versions starting 12.10 before 14.3.6 all versions starting from 14.4 before 14.4.4 all versions starting from 14.5 before 14.5.2.


An improper access control flaw in all versions of GitLab CE/EE starting from 13.9 before 14.2.6 all versions starting from 14.3 before 14.3.4 and all versions starting from 14.4 before 14.4.1 exposes private email address of Issue and Merge Requests assignee to Webhook data consumers


Improper access control in the GraphQL API in GitLab CE/EE affecting all versions starting from 13.0 before 14.3.6 all versions starting from 14.4 before 14.4.4 all versions starting from 14.5 before 14.5.2 allows an attacker to see the names of project access tokens on arbitrary projects


An Improper Access Control vulnerability in the GraphQL API in all versions of GitLab CE/EE starting from 13.1 before 14.2.6 all versions starting from 14.3 before 14.3.4 and all versions starting from 14.4 before 14.4.1 allows a Merge Request creator to resolve discussions and apply suggestions after a project owner has locked the Merge Request


Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.


An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3. If exploited this vulnerability allows attackers to compromise the security of the operating system.QNAP have already fixed this vulnerability in the following versions of HBS 3: QTS 4.3.6: HBS 3 v3.0.210507 and later QTS 4.3.4: HBS 3 v3.0.210506 and later QTS 4.3.3: HBS 3 v3.0.210506 and later


Adobe Connect version 11.2.1 (and earlier) is affected by an Improper access control vulnerability that can lead to the elevation of privileges. An attacker with 'Learner' permissions can leverage this scenario to access the list of event participants.


Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for Linux as a relay role allows an attacker to manipulate the remote address used for pulling patches. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.6.27.390; versions prior to 7.1.2.33. Bitdefender Unified Endpoint versions prior to 6.2.21.160. Bitdefender GravityZone versions prior to 6.24.1-1.


An improper access control vulnerability in PAN-OS software enables an attacker with authenticated access to GlobalProtect portals and gateways to connect to the EC2 instance metadata endpoint for VM-Series firewalls hosted on Amazon AWS. Exploitation of this vulnerability enables an attacker to perform any operations allowed by the EC2 role in AWS. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20 VM-Series firewalls; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11 VM-Series firewalls; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14 VM-Series firewalls; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8 VM-Series firewalls. Prisma Access customers are not impacted by this issue.


Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior DWR-HP-G300NH firmware Ver.1.83 and prior HW-450HP-ZWE firmware Ver.1.99 and prior WHR-300HP firmware Ver.1.99 and prior WHR-300 firmware Ver.1.99 and prior WHR-G301N firmware Ver.1.86 and prior WHR-HP-G300N firmware Ver.1.99 and prior WHR-HP-GN firmware Ver.1.86 and prior WPL-05G300 firmware Ver.1.87 and prior WZR-450HP-CWT firmware Ver.1.99 and prior WZR-450HP-UB firmware Ver.1.99 and prior WZR-HP-AG300H firmware Ver.1.75 and prior WZR-HP-G300NH firmware Ver.1.83 and prior WZR-HP-G301NH firmware Ver.1.83 and prior WZR-HP-G302H firmware Ver.1.85 and prior WZR-HP-G450H firmware Ver.1.89 and prior WZR-300HP firmware Ver.1.99 and prior WZR-450HP firmware Ver.1.99 and prior WZR-600DHP firmware Ver.1.99 and prior WZR-D1100H firmware Ver.1.99 and prior FS-HP-G300N firmware Ver.3.32 and prior FS-600DHP firmware Ver.3.38 and prior FS-R600DHP firmware Ver.3.39 and prior and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to bypass access restriction and to start telnet service and execute arbitrary OS commands with root privileges via unspecified vectors.


Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music


Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Voice & Music Snapdragon Wired Infrastructure and Networking


A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated remote attacker to read or write arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker could exploit this vulnerability by using a specific API endpoint to upload a file to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on an affected device.


A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with access to a device that is managed in the multi-tenant environment could exploit this vulnerability by sending a request to an affected API endpoint on the vManage system. A successful exploit could allow the attacker to gain access to sensitive information that may include hashed credentials that could be used in future attacks.


Improper access control in trusted application environment can cause unauthorized access to CDSP or ADSP VM memory with either privilege in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Wired Infrastructure and Networking


A vulnerability in the Cisco IOS XE SD-WAN Software CLI could allow an authenticated local attacker to overwrite arbitrary files on the local system. This vulnerability is due to improper access controls on files within the local file system. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system. A successful exploit could allow the attacker to overwrite arbitrary files on an affected device.


A vulnerability in the fabric infrastructure file system access control of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated local attacker to read arbitrary files on an affected system. This vulnerability is due to improper access control. An attacker with Administrator privileges could exploit this vulnerability by executing a specific vulnerable command on an affected device. A successful exploit could allow the attacker to read arbitrary files on the file system of the affected device.


Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade.


Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters.


Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035 Acronis Agent (Windows) before build 27147 Acronis Cyber Protect Home Office (Windows) before build 39612 Acronis True Image 2021 (Windows) before build 39287


Bitmask Riseup VPN 0.21.6 contains a local privilege escalation flaw due to improper access controls. When the software is installed with a non-default installation directory off of the system root the installer fails to properly set ACLs. This allows lower privileged users to replace the VPN executable with a malicious one. When a higher privileged user such as an Administrator launches that executable it is possible for the lower privileged user to escalate to Administrator privileges.


An improper access control vulnerability CWE-284 in FortiToken Mobile (Android) external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure even though the deny button is clicked by the legitimate user.


A vulnerability in the API endpoints for Cisco DNA Center could allow an authenticated remote attacker to gain access to sensitive information that should be restricted. The attacker must have valid device credentials. This vulnerability is due to improper access controls on API endpoints. An attacker could exploit the vulnerability by sending a specific API request to an affected application. A successful exploit could allow the attacker to obtain sensitive information about other users who are configured with higher privileges on the application.


Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploitation may lead to data extraction or modification of data inside the application. This issue affects: Hitachi Energy Retail Operations 5.7.3 and prior versions. Hitachi Energy Counterparty Settlement and Billing (CSB) 5.7.3 prior versions.


An Improper Access Control Privilege Escalation Vulnerability was discovered in the User Setting of Orion Platform version 2020.2.5. It allows a guest user to elevate privileges to the Administrator using this vulnerability. Authentication is required to exploit the vulnerability.


An improper access control vulnerability was identified in GitHub Enterprise Server that allowed access tokens generated from a GitHub App's web authentication flow to read private repository metadata via the REST API without having been granted the appropriate permissions. To exploit this vulnerability an attacker would need to create a GitHub App on the instance and have a user authorize the application through the web authentication flow. The private repository metadata returned would be limited to repositories owned by the user the token identifies. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.0.4 and was fixed in versions 3.0.4 2.22.10 2.21.18. This vulnerability was reported via the GitHub Bug Bounty program.


An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically crafted pull requests and REST API requests. An attacker would need to be able to fork the targeted repository a setting that is disabled by default for organization owned private repositories. Branch protections such as required pull request reviews or status checks would prevent unauthorized commits from being merged without further review or validation. This vulnerability affected all versions of GitHub Enterprise Server since 2.4.21 and was fixed in versions 2.20.24 2.21.15 2.22.7 and 3.0.1. This vulnerability was reported via the GitHub Bug Bounty program.


An improper access control vulnerability in GitHub Enterprise Server allowed a workflow job to execute in a self-hosted runner group it should not have had access to. This affects customers using self-hosted runner groups for access control. A repository with access to one enterprise runner group could access all of the enterprise runner groups within the organization because of improper authentication checks during the request. This could cause code to be run unintentionally by the incorrect runner group. This vulnerability affected GitHub Enterprise Server versions from 3.0.0 to 3.0.15 and 3.1.0 to 3.1.7 and was fixed in 3.0.16 and 3.1.8 releases.


An issue has been discovered in GitLab affecting all versions before 13.11.6 all versions starting from 13.12 before 13.12.6 and all versions starting from 14.0 before 14.0.2. Improper access control allows unauthorised users to access project details using Graphql.


An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0 1.2.9 and below versions may allow an authenticated remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality.


An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent repository of the fork. This vulnerability existed due to a flaw that allowed the base reference of a pull request to be updated to point to an arbitrary SHA or another pull request outside of the fork repository. By establishing this incorrect reference in a PR the restrictions that limit the Actions secrets sent a workflow from forks could be bypassed. This vulnerability affected GitHub Enterprise Server version 3.0.0 3.0.0.rc2 and 3.0.0.rc1. This vulnerability was reported via the GitHub Bug Bounty program.


Nextcloud Mail before 1.9.5 suffers from improper access control due to a missing permission check allowing other authenticated users to create mail aliases for other users.


An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability an attacker would be able to gain access to head branches of pull requests opened on repositories of which they are a maintainer. Forking is disabled by default for organization owned private repositories and would prevent this vulnerability. Additionally branch protections such as required pull request reviews or status checks would prevent unauthorized commits from being merged without further review or validation. This vulnerability affected all versions of GitHub Enterprise Server since 2.12.22 and was fixed in versions 2.20.24 2.21.15 2.22.7 and 3.0.1. This vulnerability was reported via the GitHub Bug Bounty program.


Trendnet AC2600 TEW-827DRU version 2.08B01 contains an improper access control configuration that could allow for a malicious firmware update. It is possible to manually install firmware that may be malicious in nature as there does not appear to be any signature validation done to determine if it is from a known and trusted source. This includes firmware updates that are done via the automated \check for updates\ in the admin interface. If an attacker is able to masquerade as the update server the device will not verify that the firmware updates downloaded are legitimate.


Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior WRC-1167GST2A firmware v1.25 and prior WRC-1167GST2H firmware v1.25 and prior WRC-2533GS2-B firmware v1.52 and prior WRC-2533GS2-W firmware v1.52 and prior WRC-1750GS firmware v1.03 and prior WRC-1750GSV firmware v2.11 and prior WRC-1900GST firmware v1.03 and prior WRC-2533GST firmware v1.03 and prior WRC-2533GSTA firmware v1.03 and prior WRC-2533GST2 firmware v1.25 and prior WRC-2533GST2SP firmware v1.25 and prior WRC-2533GST2-G firmware v1.25 and prior and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent unauthenticated attacker to bypass access restriction and to obtain anti-CSRF tokens and change the product's settings via unspecified vectors.


Improper access control vulnerability in acmailer ver. 4.0.1 and earlier and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors.


Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior WRC-1167GST2A firmware v1.25 and prior WRC-1167GST2H firmware v1.25 and prior WRC-2533GS2-B firmware v1.52 and prior WRC-2533GS2-W firmware v1.52 and prior WRC-1750GS firmware v1.03 and prior WRC-1750GSV firmware v2.11 and prior WRC-1900GST firmware v1.03 and prior WRC-2533GST firmware v1.03 and prior WRC-2533GSTA firmware v1.03 and prior WRC-2533GST2 firmware v1.25 and prior WRC-2533GST2SP firmware v1.25 and prior WRC-2533GST2-G firmware v1.25 and prior and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.


Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors.


Improper access control vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior WRC-1167GST2A firmware v1.25 and prior WRC-1167GST2H firmware v1.25 and prior WRC-2533GS2-B firmware v1.52 and prior WRC-2533GS2-W firmware v1.52 and prior WRC-1750GS firmware v1.03 and prior WRC-1750GSV firmware v2.11 and prior WRC-1900GST firmware v1.03 and prior WRC-2533GST firmware v1.03 and prior WRC-2533GSTA firmware v1.03 and prior WRC-2533GST2 firmware v1.25 and prior WRC-2533GST2SP firmware v1.25 and prior WRC-2533GST2-G firmware v1.25 and prior and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent unauthenticated attacker to bypass access restriction and to start the telnet service and execute an arbitrary OS command via unspecified vectors.


Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function.


An improper access control vulnerability CWE-284 in FortiAuthenticator HA service 6.3.2 and below 6.2.x 6.1.x 6.0.x may allow an attacker on the same vlan as the HA management interface to make an unauthenticated direct connection to the FAC's database.


A Improper Access Control vulnerability inf SUSE Longhorn allows any workload in the cluster to execute any binary present in the image on the host without authentication. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3.


A Improper Access Control vulnerability in longhorn of SUSE Longhorn allows attackers to connect to a longhorn-engine replica instance granting it the ability to read and write data to and from a replica that they should not have access to. This issue affects: SUSE Longhorn longhorn versions prior to 1.1.3; longhorn versions prior to 1.2.3v.


A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0_TY.T6


Acrobat Reader DC versions versions 2020.013.20074 (and earlier) 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user.


A

mobile

phone

of

ZTE

is

impacted

by

improper

access

control

vulnerability.

Due

to

improper

permission

settings

third-party

applications

can

read

some

files

in

the

proc

file

system

without

authorization.

Attackers

could

exploit

this

vulnerability

to

obtain

sensitive

information.

This

affects

Axon


AEM's Cloud Service offering as well as versions 6.5.7.0 (and below) 6.4.8.3 (and below) and 6.3.3.8 (and below) are affected by an Improper Access Control vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service in the context of the current user.


Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network information and configuration of the SiteManager. This issue affects: Secomea SiteManager All versions prior to 9.5 on Hardware.


The Trend Micro Maximum Security 2021 (v17) consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a target machine. Please note than an attacker must already have local user privileges and access on the machine to exploit this vulnerability.


An improper access control vulnerability in FortiManager and FortiAnalyzer GUI interface 7.0.0 6.4.5 and below 6.2.8 and below 6.0.11 and below 5.6.11 and below may allow a remote and authenticated attacker with restricted user profile to retrieve the list of administrative users of other ADOMs and their related configuration.


Improper access control vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.


Improper Access Control of Dynamically-Managed Code Resources (DLL) in Thales Sentinel Protection Installer could allow the execution of arbitrary code.


A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) V15 (All versions) SIMATIC STEP 7 (TIA Portal) V16 (All versions < V16 Update 5) SIMATIC STEP 7 (TIA Portal) V17 (All versions < V17 Update 2). An attacker could achieve privilege escalation on the web server of certain devices due to improper access control vulnerability in the engineering system software. The attacker needs to have direct access to the impacted web server.


An improper access control vulnerability in Trend Micro Apex One Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.


A Improper Access Control vulnerability in Rancher allows users in the cluster to make request to cloud providers by creating requests with the cloud-credential ID. Rancher in this case would attach the requested credentials without further checks This issue affects: Rancher versions prior to 2.5.9; Rancher versions prior to 2.4.16.


An improper access control vulnerability in Trend Micro Apex One Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.


Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated privilege.


An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings like /wp-admin/customization.php and /wp-admin/options.php can lead to a complete compromise of the target resource.


Trend Micro Antivirus for Mac 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.


In Weidmueller Industrial WLAN devices in multiple versions an exploitable improper access control vulnerability exists in the iw_webs account settings functionality. A specially crafted user name entry can cause the overwrite of an existing user account password resulting in remote shell access to the device as that user. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.


An improper access control vulnerability CWE-284 in FortiOS versions 6.4.8 and prior and 7.0.3 and prior may allow an authenticated attacker with a restricted user profile to gather sensitive information and modify the SSL-VPN tunnel status of other VDOMs using specific CLI commands.


An improper access control vulnerability CWE-284 in FortiOS autod daemon 7.0.0 6.4.6 and below 6.2.9 and below 6.0.12 and below and FortiProxy 2.0.1 and below 1.2.9 and below may allow an authenticated low-privileged attacker to escalate their privileges to super_admin via a specific crafted configuration of fabric automation CLI script and auto-script features.


Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `webserver expose_config` is set to `False` in `airflow.cfg`. This allowed a privilege escalation attack. This issue affects Apache Airflow 2.0.0.


The Weintek cMT product line is vulnerable to various improper access controls which may allow an unauthenticated attacker to remotely access and download sensitive information and perform administrative actions on behalf of a legitimate administrator.


Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Wired Infrastructure and Networking


viewvc 1.0.3 allows improper access control to files in a repository when using the \forbidden\ configuration option.


RESI Gemini-Net Web 4.2 is affected by Improper Access Control in authorization logic. An unauthenticated user is able to access some critical resources.


Improper Access Control (IDOR) in GitHub repository dolibarr/dolibarr prior to 16.0.


Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website compromising confidentiality and integrity of users.


Improper access control in GitLab CE/EE affecting all versions starting from 8.12 before 14.8.6 all versions starting from 14.9 before 14.9.4 and all versions starting from 14.10 before 14.10.1 allows non-project members to access contents of Project Members-only Wikis via malicious CI jobs


Argo

CD

is

a

declarative

GitOps

continuous

delivery

tool

for

Kubernetes.

Argo

CD

starting

with

version

but

before

versions

and

is

vulnerable

to

a

path

traversal

bug

compounded

by

an

improper

access

control

bug

allowing

a

malicious

user

with

read-only

repository

access

to

leak

sensitive

files

from

Argo

CD's

repo-server.

A

malicious

Argo

CD

user

who

has

been

granted

`get`

access

for

a

repository

containing

a

Helm

chart

can

craft

an

API

request

to

the

`/api/v1/repositories/{repo_url}/appdetails`

endpoint

to

leak

the

contents

of

out-of-bounds

files

from

the

repo-server.

The

malicious

payload

would

reference

an

out-of-bounds

file

and

the

contents

of

that

file

would

be

returned

as

part

of

the

response.

Contents

from

a

non-YAML

file

may

be

returned

as

part

of

an

error

message.

The

attacker

would

have

to

know

or

guess

the

location

of

the

target

file.

Sensitive

files

which

could

be

leaked

include

files

from

other

Applications'

source

repositories

or

any

secrets

which

have

been

mounted

as

files

on

the

repo-server.

This

vulnerability

is

patched

in

Argo

CD

versions

and

The

patches

prevent

path

traversal

and

limit

access

to

users

who

either

A)

have

been

granted

Application

`create`

privileges

or

B)

have

been

granted

Application

`get`

privileges

and

are

requesting

details

for

a

that

has

already

been

used

for

the

given

Application.

There

are

currently

no

known

workarounds.


Argo CD is a declarative GitOps continuous delivery tool for Kubernetes. All unpatched versions of Argo CD starting with 1.0.0 are vulnerable to an improper access control bug allowing a malicious user to potentially escalate their privileges to admin-level. Versions starting with 0.8.0 and 0.5.0 contain limited versions of this issue. To perform exploits an authorized Argo CD user must have push access to an Application's source git or Helm repository or `sync` and `override` access to an Application. Once a user has that access different exploitation levels are possible depending on their other RBAC privileges. A patch for this vulnerability has been released in Argo CD versions 2.3.2 2.2.8 and 2.1.14. Some mitigation measures are available but do not serve as a substitute for upgrading. To avoid privilege escalation limit who has push access to Application source repositories or `sync` + `override` access to Applications; and limit which repositories are available in projects where users have `update` access to Applications. To avoid unauthorized resource inspection/tampering limit who has `delete` `get` or `action` access to Applications.


An Improper access control vulnerability in StRetailModeReceiver in Wear OS 3.0 prior to Firmware update MAR-2022 Release allows untrusted applications to reset default app settings without a proper permission


Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add (or remove) client MAC addresses to (or from) a list of banned hosts. Clients with those MAC addresses are then prevented from accessing either the WAN or the router itself.


Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated remote attacker to obtain the WPA passphrases for the 2.4GHz and 5.0GHz wireless networks. This is particularly dangerous given that the K2G setup wizard presents the user with the option of using the same password for the 2.4Ghz network and the administrative interface by clicking a checkbox. When Remote Managment is enabled these endpoints are exposed to the WAN.


Improper access control vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior WRC-1167GST2A firmware v1.25 and prior WRC-1167GST2H firmware v1.25 and prior WRC-2533GS2-B firmware v1.52 and prior WRC-2533GS2-W firmware v1.52 and prior WRC-1750GS firmware v1.03 and prior WRC-1750GSV firmware v2.11 and prior WRC-1900GST firmware v1.03 and prior WRC-2533GST firmware v1.03 and prior WRC-2533GSTA firmware v1.03 and prior WRC-2533GST2 firmware v1.25 and prior WRC-2533GST2SP firmware v1.25 and prior WRC-2533GST2-G firmware v1.25 and prior and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to bypass access restriction and to access the management screen of the product via unspecified vectors.


Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access.


Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a remote attacker with the privilege to change NTP GPS settings to rewrite existing files on the file system which may result in arbitrary command execution.


Archer 6.x through 6.9 SP2 P1 (6.9.2.1) contains an improper access control vulnerability on attachments. A remote authenticated malicious user could potentially exploit this vulnerability to gain access to files that should only be allowed by extra privileges.


An Improper Access Control vulnerability in the Juniper Networks Paragon Active Assurance Control Center allows an unauthenticated attacker to leverage a crafted URL to generate PDF reports potentially containing sensitive configuration information. A feature was introduced in version 3.1 of the Paragon Active Assurance Control Center which allows users to selective share account data using a unique identifier. Knowing the proper format of the URL and the identifier of an existing object in an application it is possible to get access to that object without being logged in even if the object is not shared resulting in the opportunity for malicious exfiltration of user data. Note that the Paragon Active Assurance Control Center SaaS offering is not affected by this issue. This issue affects Juniper Networks Paragon Active Assurance version 3.1.0.


SonicWall SMA1000 series firmware 12.4.0 12.4.1-02965 and earlier versions incorrectly restricts access to a resource using HTTP connections from an unauthorized actor leading to Improper Access Control vulnerability.


An Improper access control vulnerability in StBedtimeModeReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.


A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.


IBM Daeja ViewONE Professional Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not have access to due to improper access controls. IBM X-Force ID: 125462.


IBM Emptoris Services Procurement 10.0.0.5 could allow a local user to view sensitive information stored locally due to improper access control. IBM X-Force ID: 128106.


An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1 allows unauthorized users to alter the maximum size of storage groups and enable/disable the setting for the 'follow schedule' function.


On Lenovo VIBE mobile phones improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or \jail breaking\ a device).


An

improper

Access

Control

vulnerability

in

Fortinet

FortiPortal

versions

and

below

allows

an

attacker

to

interact

with

unauthorized

VDOMs

or

enumerate

other

ADOMs

via

another

user's

stolen

session

and

CSRF

tokens

or

the

adomName

parameter

in

the

request.


An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions R202 and R203 R203-V1 R203-V2 and R204 R204-V1. The device does not properly enforce access control while configured for NAT port forwarding which may allow for unauthorized communications to downstream devices.


An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuration export an attacker is able to remotely trigger device configuration backups using specific MIBs. These backups lack proper access control and may allow access to sensitive information and possibly allow for configuration changes.


Quick Emulator (Qemu) built with the VirtFS host directory sharing via Plan 9 File System(9pfs) support is vulnerable to an improper access control issue. It could occur while accessing virtfs metadata files in mapped-file security mode. A guest user could use this flaw to escalate their privileges inside guest.


Quick Emulator (Qemu) built with the VirtFS host directory sharing via Plan 9 File System (9pfs) support is vulnerable to an improper access control issue. It could occur while accessing files on a shared host directory. A privileged user inside guest could use this flaw to access host file system beyond the shared folder and potentially escalating their privileges on a host.


An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA. The following versions are affected: Versions 4.1 and prior versions released before January 20 2017. An Improper Access Control vulnerability has been identified which may allow an authenticated user to modify application files to escalate privileges.


Huawei

OceanStor

OceanStor

OceanStor

OceanStor

OceanStor

have

an

improper

access

control

vulnerability.

Due

to

incorrectly

restrict

access

to

a

resource

an

attacker

with

high

privilege

may

exploit

the

vulnerability

to

query

some

information

or

send

specific

message

to

cause

some

service

abnormal.


XPU

Master

privilege

escalation

is

possible

due

to

improper

access

control

of

unused

configuration

xPU

ports

where

unused

configuration

ports

are

open

in

Snapdragon

Automobile

Snapdragon

Mobile

Snapdragon

Wear

in

version

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


Improper

access

control

on

secure

display

buffers

in

snapdragon

automobile

snapdragon

mobile

and

snapdragon

wear

in

versions

SD

SD

SD

SD


In

Android

before

or

earlier

security

patch

level

on

Qualcomm

Snapdragon

Mobile

and

Snapdragon

Wear

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

and

there

is

improper

access

control

in

a

file

storage

API.


In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel an Improper Access Control vulnerability could potentially exist.


iBall Baton iB-WRB302N20122017 devices have improper access control over the UART interface allowing physical attackers to discover Wi-Fi credentials (plain text) and the web-console password (base64) via the debugging console.


Yeelight Smart AI Speaker 3.3.10_0074 devices have improper access control over the UART interface allowing physical attackers to obtain a root shell. The attacker can then exfiltrate the audio data read cleartext Wi-Fi credentials in a log file or access other sensitive device and user information.


An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000) CoaguChek Pro II before 04.03.00 and cobas h 232 before 04.00.04 (Serial number above KQ0400000 or KS0400000). Improper access control allows attackers in the adjacent network to change the instrument configuration.


There is improper access control of the SSC and GPU mapped regions which lead to inject code from HLOS in Snapdragon Automobile Snapdragon Mobile Snapdragon Wear in version MDM9206 MDM9607 MDM9650 MSM8996AU SD 210/SD 212/SD 205 SD 820 SD 820A SD 835 SDA660.


Several administrative resources in Atlassian Jira before version 7.6.9 from version 7.7.0 before version 7.7.5 from version 7.8.0 before version 7.8.5 from version 7.9.0 before version 7.9.3 from version 7.10.0 before version 7.10.3 from version 7.11.0 before version 7.11.3 from version 7.12.0 before version 7.12.3 and before version 7.13.1 allow remote attackers who have obtained access to administrator's session to access certain administrative resources without needing to re-authenticate to pass \WebSudo\ through an improper access control vulnerability.


A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access control to a data point of the affected product could allow an unauthenticated remote user to escalate its privileges in the context of SIMATIC WinCC OA V3.14. This vulnerability could be exploited by an attacker with network access to port 5678/TCP of the SIMATIC WinCC OA V3.14 server. Successful exploitation requires no user privileges and no user interaction. This vulnerability could allow an attacker to compromise integrity and availability of the SIMATIC WinCC OA system. At the time of advisory publication no public exploitation of this vulnerability was known.


A Improper Access Control in Fortinet FortiOS 6.0.2 5.6.7 and before FortiADC 6.1.0 6.0.0 to 6.0.1 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.


A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall Cisco RV130W Wireless-N Multifunction VPN Router and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated remote attacker to gain access to sensitive information. The vulnerability is due to improper access control to files within the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to a targeted device. A successful exploit could allow the attacker to gain access to sensitive configuration information including user authentication credentials.


Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile Snapdragon Mobile and Snapdragon Wear From fastboot on a NAND-based device the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and configures the EFS partition addresses in its MPU partition.


Cloud Foundry Silk CNI plugin versions prior to 0.2.0 contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) that overlaps with the Silk overlay network any applications can reach any other application on the network regardless of the configured routing policies.


EMC RSA Archer versions prior to 6.2.0.8 contains an improper access control vulnerability on an API which is used to enumerate user information. A remote authenticated malicious user can potentially exploit this vulnerability to gather information about the user base and may use this information in subsequent attacks.


Cloud Foundry BOSH CLI versions prior to v3.0.1 contains an improper access control vulnerability. A user with access to an instance using the BOSH CLI can access the BOSH CLI configuration file and use its contents to perform authenticated requests to BOSH.


This vulnerability allows remote attackers to cause a denial-of-service condition on vulnerable installations of ZyXEL P-870H-51 DSL Router 1.00(AWG.3)D5. Authentication is not required to exploit this vulnerability. The specific flaw exists within numerous exposed CGI endpoints. The vulnerability is caused by improper access controls that allow access to critical functions without authentication. An attacker can use this vulnerability to reboot affected devices along with other actions. Was ZDI-CAN-4540.


The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrictions logging in as a more powerful administrator. This attack appear to be exploitable via Use user administration privilege to set the password of a more powerful administrator. This vulnerability appears to have been fixed in 5.4.7.


RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information.


BPC

SmartVista

has

Improper

Access

Control

in

the

SVFE

module

where

it

fails

to

appropriately

restrict

access:

a

normal

user

is

able

to

access

the

functionality

that

should

be

only

accessible

to

an

admin.


An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \\\\.\\ZemanaAntiMalware to elevate privileges.


An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \\\\.\\ZemanaAntiMalware to elevate privileges.


ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5 V2.2.0_PK1.2T2 V2.2.0_PK11T7 and V2.2.0_PK11T have an improper access control vulnerability which may allow an unauthorized user to gain unauthorized access.


An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited this vulnerability allows attackers to compromise the security of the software by gaining privileges reading sensitive information executing commands evading detection etc. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6; versions prior to 5.1.14 on QTS 4.3.3; versions prior to 5.3.16 on QuTS hero h4.5.2; versions prior to 5.3.16 on QuTScloud c4.5.4.


Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41 12.1-62.23 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.


Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30 12.1-57.18 12.0-63.21 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a 11.0.3d and 10.2.7 allows unauthenticated access to certain URL endpoints.


A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 3.2 SUSE Manager Server 4.0 allows local users to escalate to root on every system managed by SUSE manager. On the managing node itself code can be executed as user salt potentially allowing for escalation to root there. This issue affects: SUSE Linux Enterprise Module for SUSE Manager Server 4.1 google-gson versions prior to 2.8.5-3.4.3 httpcomponents-client-4.5.6-3.4.2 httpcomponents-. SUSE Manager Proxy 4.0 release-notes-susemanager-proxy versions prior to 4.0.9-0.16.38.1. SUSE Manager Retail Branch Server 4.0 release-notes-susemanager-proxy versions prior to 4.0.9-0.16.38.1. SUSE Manager Server 3.2 salt-netapi-client versions prior to 0.16.0-4.14.1 spacewalk-. SUSE Manager Server 4.0 release-notes-susemanager versions prior to 4.0.9-3.54.1.


Adobe Genuine Service version 6.6 (and earlier) is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user.


SAP NetWeaver AS ABAP (Web Dynpro) versions - 731 740 750 751 752 753 754 755 782 allows an authenticated user to access Web Dynpro components that allows them to read and delete database logfiles because of Improper Access Control.


A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticated remote attacker to view lists of users from different domains that are configured on an affected system. The vulnerability is due to improper access control. An attacker could exploit this vulnerability by sending an API request that alters the domain for a requested user list on an affected system. A successful exploit could allow the attacker to view lists of users from different domains on the affected system.


A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program attackers could use this vulnerability to gain access right through brute-force attacks. This affects: <ZXONE 19700 SNPE><ZXONE8700V1.40R2B13_SNPE>


Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthorised use of the configuration tool from older versions of ENS.


A CWE-284 Improper Access Control vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker being able to access a restricted web resources due to improper access control.


Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 September 2020 Update allows local users to access files which the user otherwise would not have access to via manipulating symbolic links to redirect McAfee file operations to an unintended file.


A CWE-284 Improper Access Control vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and prior) which allows an attacker to place executables in a specific folder and run code whenever RemoteConnect is executed by the user.


Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import.


Advantech iView versions 5.6 and prior has an improper access control vulnerability. Successful exploitation of this vulnerability may allow an attacker to obtain all user accounts credentials.


The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization checks. An attacker may leverage this issue to manipulate the integrity of dive logs.


TCP/IP function included in the firmware of Mitsubishi Electric GOT2000 series (CoreOS with version -Y and earlier installed in GT27 Model GT25 Model and GT23 Model) contains an improper access control vulnerability which may which may allow a remote attacker tobypass access restriction and stop the network functions of the products or execute a malicious program via a specially crafted packet.


Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before RD81DL96 High Speed Data Logger Module First 2 digits of serial number are '08' or before RD81MES96N MES Interface Module First 2 digits of serial number are '04' or before and RD81OPC96 OPC UA Server Module First 2 digits of serial number are '04' or before) allows a remote unauthenticated attacker to stop the network functions of the products or execute a malicious program via a specially crafted packet.


In

PrestaShop

between

versions

and

there

are

improper

access

control

since

the

the

version

for

legacy

controllers.

admin-dev/index.php/configure/shop/customer-preferences/

admin-dev/index.php/improve/international/translations/

admin-dev/index.php/improve/international/geolocation/

admin-dev/index.php/improve/international/localization

admin-dev/index.php/configure/advanced/performance

admin-dev/index.php/sell/orders/delivery-slips/

admin-dev/index.php?controller=AdminStatuses

The

problem

is

fixed

in


IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions caused by improper access control. By sending a specially-crafted request to the REST API an attacker could exploit this vulnerability to bypass access restrictions and execute arbitrary actions with administrative privileges. IBM X-Force ID: 182114.


IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028.


pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo.


An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research.


Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Voice & Music Snapdragon Wearables


u'Third-party

app

may

also

call

the

broadcasts

in

Perfdump

and

cause

privilege

escalation

issue

due

to

improper

access

control'

in

Snapdragon

Auto

Snapdragon

Connectivity

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

Mobile

Snapdragon

Wearables

in

Agatti

Bitra

Kamorta

Nicobar

Rennell

Saipan


Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware.


Archer before 6.9 P1 (6.9.0.1) contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system and may use this information in subsequent attacks.


Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemon included in the firmware image. By default the SSH daemon is disabled and does not start at system boot. The system initialization scripts read a device configuration file variable to see if the SSH daemon should be started. The web interface does not provide a visible capability to alter this configuration file variable. However a malicious actor can include this variable in a POST such that the SSH daemon will be started when the device boots.


HUAWEI smartphones P30 with versions earlier than 10.0.0.185(C00E85R1P11) have an improper access control vulnerability. The software incorrectly restricts access to a function interface from an unauthorized actor the attacker tricks the user into installing a crafted application successful exploit could allow the attacker do certain unauthenticated operations.


An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to determine the names of unauthorized private repositories given their numerical IDs. This vulnerability did not allow unauthorized access to any repository content besides the name. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22 and was fixed in versions 2.21.6 2.20.15 and 2.19.21. This vulnerability was reported via the GitHub Bug Bounty program.


An improper access control vulnerability was identified in the GitHub Enterprise Server API that allowed an organization member to escalate permissions and gain access to unauthorized repositories within an organization. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.21 and was fixed in 2.20.9 2.19.15 and 2.18.20. This vulnerability was reported via the GitHub Bug Bounty program.


A vulnerability in the Web Access feature of Cisco IP Phones Series 7800 and Series 8800 could allow an unauthenticated remote attacker to view sensitive information on an affected device. The vulnerability is due to improper access controls on the web-based management interface of an affected device. An attacker could exploit this vulnerability by sending malicious requests to the device which could allow the attacker to bypass access restrictions. A successful attack could allow the attacker to view sensitive information including device call logs that contain names usernames and phone numbers of users of the device.


u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Wired Infrastructure and Networking in Agatti Bitra Kamorta QCA6390 QCS404 QCS610 Rennell SA515M SC7180 SC8180X SDX55 SM6150 SM7150 SM8150 SM8250 SXR2130


An issue was discovered in Mods for HESK 3.1.0 through 2019.1.0. A privileged user can achieve code execution on the server via a ticket because of improper access control of uploaded resources. This might be exploitable in conjunction with CVE-2020-13992 by an unauthenticated attacker.


This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service. Attackers can access the sensitive data on QNAP Kayako server with API keys. We have replaced the API key to mitigate the vulnerability and already fixed the issue in Helpdesk 3.0.1 and later versions.


The vulnerability have been reported to affect earlier versions of QTS. If exploited this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.


In

Android

before

or

earlier

security

patch

level

on

Qualcomm

Snapdragon

Automobile

Snapdragon

Mobile

and

Snapdragon

Wear

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

and

in

QTEE

a

TOCTOU

vulnerability

exists

due

to

improper

access

control.


In

Android

before

or

earlier

security

patch

level

on

Qualcomm

Small

Cell

SoC

Snapdragon

Automobile

Snapdragon

Mobile

and

Snapdragon

Wear

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

and

improper

access

control

in

system

call

leads

to

unauthorized

access.


In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9640 SDM630 MSM8976 MSM8937 SDM845 MSM8976 and MSM8952 when running module or kernel code with improper access control allowing writing to arbitrary regions of memory the user may utilize this vector to alter module executable code.


In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile Snapdragon Mobile and Snapdragon Wear MDM9206 MDM9650 SD 210/SD 212/SD 205 SD 425 SD 430 SD 450 SD 625 SD 650/52 SD 820 SD 820A and SD 835 HLOS can enable PMIC debug through TCSR_QPDI_DISABLE_CFG due to improper access control.


IBM WebSphere MQ 9.0.0.1 and 9.0.2 could allow a local user to write to a file or delete files in a directory they should not have access to due to improper access controls. IBM X-Force ID: 117926.


There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.


There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause media files which can be reads and writes in non-distributed directories on any device on the network..


There is an Improper Access Control vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause app redirections.


There is an Improper access control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.


There is an improper access control vulnerability in the video module. Successful exploitation of this vulnerability may affect confidentiality.


An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauthorized users to access details on analytic pages.


An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests


An issue has been discovered in GitLab affecting versions >=10.7 <13.0.14 >=13.1.0 <13.1.8 >=13.2.0 <13.2.6. Improper Access Control for Deploy Tokens


All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by improper access control vulnerability which may allows an unauthorized user to perform unauthorized operations on the router.


Improper

Access

Control

in

Jfinal

CMS

and

earlier

allows

remote

attackers

to

obtain

sensitive

information

and/or

execute

arbitrary

code

via

the

'FileManager.rename()'

function

in

the

component

'modules/filemanager/FileManagerController.java'.

improper access control
arbitrary code execution


Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL preloading attack using unsigned DLLs. This would result in elevation of privileges and the ability to execute arbitrary code as the system user through not correctly protecting a temporary directory used in the repair process and not checking the DLL signature.


An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x before 04.03.00 (Serial Number above 14000) CoaguChek Pro II before 04.03.00 CoaguChek XS Plus before 03.01.06 CoaguChek XS Pro before 03.01.06 cobas h 232 before 03.01.03 (Serial Number below KQ0400000 or KS0400000) and cobas h 232 before 04.00.04 (Serial Number above KQ0400000 or KS0400000). Improper access control to a service command allows attackers in the adjacent network to execute arbitrary code on the system through a crafted Poct1-A message.


All versions up to ZXINOS-RESV1.01.43 of the ZTE ZXIN10 product European region are impacted by improper access control vulnerability. Due to improper access control to devcomm process an unauthorized remote attacker can exploit this vulnerability to execute arbitrary code with root privileges.


Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicious app would need to be installed on the Android device or a threat actor would need to execute arbitrary code on the Android device.


Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code with the SYSTEM privilege on the computer where PALLET CONTROL is installed via unspecified vectors. PalletControl 7 to 9.1 are not affected by this vulnerability however under the environment where PLS Management Add-on Module is used all versions are affected.


Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto Snapdragon Compute Snapdragon Connectivity Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile Snapdragon Wired Infrastructure and Networking in MDM9205 QCS404 QCS605 SDA845 SDM670 SDM710 SDM845 SDM850 SM8150 SXR1130 SXR2130


This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities QNAP recommend updating Photo Station to their latest versions.


CWE-284: Improper Access Control vulnerability exists in BMXNOR0200H Ethernet / Serial RTU module (all firmware versions) which could cause the execution of commands by unauthorized users when using IEC 60870-5-104 protocol.


An improper access control vulnerability in FortiClientMac before 6.0.5 may allow an attacker to affect the application's performance via modifying the contents of a file used by several FortiClientMac processes.


An improper access control vulnerability exists in Gitlab EE <v12.3.3 <v12.2.7 & <v12.1.13 that allowed the group search feature with Elasticsearch to return private code merge requests and commits.


An improper access control vulnerability exists in GitLab <12.3.3 that allows an attacker to obtain container and dependency scanning reports through the merge request widget even though public pipelines were disabled.


An improper access control vulnerability in FortiMail admin webUI 6.2.0 6.0.0 to 6.0.6 5.4.10 and below may allow administrators to access web console they should not be authorized for.


An improper access control vulnerability exists in Gitlab <v12.3.2 <v12.2.6 <v12.1.12 which would allow a blocked user would be able to use GIT clone and pull if he had obtained a CI/CD token before.


An improper access control vulnerability in FortiMail admin webUI 6.2.0 6.0.0 to 6.0.6 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for.


An improper access control vulnerability has been reported to affect QNAP NAS. If exploited this vulnerability allows remote attackers to compromise the security of the software. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.4.


An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.


An Improper Access Control Vulnerability in the SMA100 series leads to multiple restricted management APIs being accessible without a user login potentially exposing configuration meta-data.


An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file potentially resulting in a reboot to factory default settings.


A Improper Access Control vulnerability in SUSE Rancher allows remote attackers impersonate arbitrary users. This issue affects: SUSE Rancher Rancher versions prior to 2.5.10.


a Improper Access Control vulnerability in SUSE Rancher allows users to keep privileges that should have been revoked. This issue affects: SUSE Rancher Rancher versions prior to 2.4.18; Rancher versions prior to 2.5.12; Rancher versions prior to 2.6.3.


An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover.