CWE-280 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-280/ Sun, 26 Feb 2023 06:33:58 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-280 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-280/ 32 32 CVE-2019-6570 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-6570/ Sun, 26 Feb 2023 06:33:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-6570/ A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.

The post CVE-2019-6570 appeared first on CVE Vulnerability.

]]> A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authorization. An attacker must have access to a low privileged account in order to exploit the vulnerability.

The post CVE-2019-6570 appeared first on CVE Vulnerability.

]]> CVE-2022-4863 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-4863/ Thu, 23 Feb 2023 05:21:50 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-4863/ Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.

The post CVE-2022-4863 appeared first on CVE Vulnerability.

]]> Improper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.

The post CVE-2022-4863 appeared first on CVE Vulnerability.

]]> CVE-2023-22737 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-22737/ Wed, 22 Feb 2023 14:02:24 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-22737 wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation admins should be able to remove Bots. Regular Conversations are not allowed to do so. The issue is […]

The post CVE-2023-22737 appeared first on CVE Vulnerability.

]]> wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member of a Conversation can remove a Bot from a Conversation due to a missing permissions check. Only Conversation admins should be able to remove Bots. Regular Conversations are not allowed to do so. The issue is fixed in wire-server 2022-12-09 and is already deployed on all Wire managed services. On-premise instances of wire-server need to be updated to 2022-12-09/Chart 4.29.0, so that their backends are no longer affected. There are no known workarounds.

The post CVE-2023-22737 appeared first on CVE Vulnerability.

]]>