CWE-552 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-552/ Sun, 26 Feb 2023 06:51:51 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-552 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-552/ 32 32 CVE-2018-9587 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9587/ Sun, 26 Feb 2023 06:51:51 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9587/ In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible unauthorized access to files within the contact app due to a confused deputy scenario. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Android ID: A-113597344.

The post CVE-2018-9587 appeared first on CVE Vulnerability.

]]> In savePhotoFromUriToUri of ContactPhotoUtils.java in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is possible unauthorized access to files within the contact app due to a confused deputy scenario. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Android ID: A-113597344.

The post CVE-2018-9587 appeared first on CVE Vulnerability.

]]> CVE-2018-5112 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-5112/ Sun, 26 Feb 2023 06:50:12 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-5112/ Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was not enforced in all instances. This could allow the development tools panel for the extension to load a URL that it should not be able to access, including potentially […]

The post CVE-2018-5112 appeared first on CVE Vulnerability.

]]> Development Tools panels of an extension are required to load URLs for the panels as relative URLs from the extension manifest file but this requirement was not enforced in all instances. This could allow the development tools panel for the extension to load a URL that it should not be able to access, including potentially privileged pages. This vulnerability affects Firefox < 58.

The post CVE-2018-5112 appeared first on CVE Vulnerability.

]]> CVE-2018-16946 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16946/ Sun, 26 Feb 2023 06:47:14 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16946/ LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /updownload/t.report (aka Log & Report) files and download backup files (via download.php) without authenticating. These backup files contain user credentials and configuration information for the camera device. An attacker is able to discover the backup filename […]

The post CVE-2018-16946 appeared first on CVE Vulnerability.

]]> LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /updownload/t.report (aka Log & Report) files and download backup files (via download.php) without authenticating. These backup files contain user credentials and configuration information for the camera device. An attacker is able to discover the backup filename via reading the system logs or report data, or just by brute-forcing the backup filename pattern. It may be possible to authenticate to the admin account with the admin password.

The post CVE-2018-16946 appeared first on CVE Vulnerability.

]]> CVE-2018-10863 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10863/ Sun, 26 Feb 2023 06:45:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10863/ It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information.

The post CVE-2018-10863 appeared first on CVE Vulnerability.

]]> It was discovered that redhat-certification 7 is not properly configured and it lists all files and directories in the /var/www/rhcert/store/transfer directory, through the /rhcert-transfer URL. An unauthorized attacker may use this flaw to gather sensible information.

The post CVE-2018-10863 appeared first on CVE Vulnerability.

]]> CVE-2018-10867 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10867/ Sun, 26 Feb 2023 06:45:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10867/ Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user.

The post CVE-2018-10867 appeared first on CVE Vulnerability.

]]> Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user.

The post CVE-2018-10867 appeared first on CVE Vulnerability.

]]> CVE-2018-10869 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-10869/ Sun, 26 Feb 2023 06:45:01 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-10869/ redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.

The post CVE-2018-10869 appeared first on CVE Vulnerability.

]]> redhat-certification does not properly restrict files that can be download through the /download page. A remote attacker may download any file accessible by the user running httpd.

The post CVE-2018-10869 appeared first on CVE Vulnerability.

]]> CVE-2018-0106 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-0106/ Sun, 26 Feb 2023 06:44:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-0106/ A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted system. The vulnerability is due to insufficient security restrictions. An attacker could exploit this vulnerability by accessing unauthorized information within the ConfD directory and file structure. Successful exploitation could […]

The post CVE-2018-0106 appeared first on CVE Vulnerability.

]]> A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted system. The vulnerability is due to insufficient security restrictions. An attacker could exploit this vulnerability by accessing unauthorized information within the ConfD directory and file structure. Successful exploitation could allow the attacker to view sensitive information. Cisco Bug IDs: CSCvg00221.

The post CVE-2018-0106 appeared first on CVE Vulnerability.

]]> CVE-2020-5356 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5356/ Sun, 26 Feb 2023 06:42:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5356/ Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.

The post CVE-2020-5356 appeared first on CVE Vulnerability.

]]> Dell PowerProtect Data Manager (PPDM) versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines.

The post CVE-2020-5356 appeared first on CVE Vulnerability.

]]> CVE-2020-5289 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5289/ Sun, 26 Feb 2023 06:42:16 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5289/ In Elide before 4.5.14, it is possible for an adversary to “guess and check” the value of a model field they do not have access to assuming they can read at least one other field in the model. The adversary can construct filter expressions for an inaccessible field to filter a collection. The presence or […]

The post CVE-2020-5289 appeared first on CVE Vulnerability.

]]> In Elide before 4.5.14, it is possible for an adversary to “guess and check” the value of a model field they do not have access to assuming they can read at least one other field in the model. The adversary can construct filter expressions for an inaccessible field to filter a collection. The presence or absence of models in the returned collection can be used to reconstruct the value of the inaccessible field. Resolved in Elide 4.5.14 and greater.

The post CVE-2020-5289 appeared first on CVE Vulnerability.

]]> CVE-2020-5250 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-5250/ Sun, 26 Feb 2023 06:42:15 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-5250/ In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else’s address. It is the same with CustomerForm, you are able to change the id_customer and change all information of all accounts. The problem is patched in version 1.7.6.4.

The post CVE-2020-5250 appeared first on CVE Vulnerability.

]]> In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else’s address. It is the same with CustomerForm, you are able to change the id_customer and change all information of all accounts. The problem is patched in version 1.7.6.4.

The post CVE-2020-5250 appeared first on CVE Vulnerability.

]]>