access_control Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/access_control/ Thu, 23 Feb 2023 14:12:39 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png access_control Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/access_control/ 32 32 CVE-2021-44233 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44233/ Thu, 23 Feb 2023 14:12:39 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44233/ SAP GRC Access Control – versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.

The post CVE-2021-44233 appeared first on CVE Vulnerability.

]]> SAP GRC Access Control – versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.

The post CVE-2021-44233 appeared first on CVE Vulnerability.

]]> CVE-2022-39801 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-39801/ Thu, 23 Feb 2023 05:20:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-39801/ SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the attacker can gain access to admin session and completely compromise the application.

The post CVE-2022-39801 appeared first on CVE Vulnerability.

]]> SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the attacker can gain access to admin session and completely compromise the application.

The post CVE-2022-39801 appeared first on CVE Vulnerability.

]]>