CWE-842 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-842/ Sun, 26 Feb 2023 09:10:59 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-842 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-842/ 32 32 CVE-2008-5397 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-5397/ Sun, 26 Feb 2023 09:10:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-5397/ Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process.

The post CVE-2008-5397 appeared first on CVE Vulnerability.

]]> Tor before 0.2.0.32 does not properly process the (1) User and (2) Group configuration options, which might allow local users to gain privileges by leveraging unintended supplementary group memberships of the Tor process.

The post CVE-2008-5397 appeared first on CVE Vulnerability.

]]> CVE-2007-6644 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-6644/ Sun, 26 Feb 2023 09:08:17 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-6644/ Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model.

The post CVE-2007-6644 appeared first on CVE Vulnerability.

]]> Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model.

The post CVE-2007-6644 appeared first on CVE Vulnerability.

]]> CVE-2007-3260 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-3260/ Sun, 26 Feb 2023 09:06:39 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-3260/ HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.

The post CVE-2007-3260 appeared first on CVE Vulnerability.

]]> HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges.

The post CVE-2007-3260 appeared first on CVE Vulnerability.

]]> CVE-2022-2989 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-2989/ Thu, 23 Feb 2023 05:18:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-2989/ An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

The post CVE-2022-2989 appeared first on CVE Vulnerability.

]]> An incorrect handling of the supplementary groups in the Podman container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

The post CVE-2022-2989 appeared first on CVE Vulnerability.

]]> CVE-2022-2990 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-2990/ Thu, 23 Feb 2023 05:18:32 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-2990/ An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

The post CVE-2022-2990 appeared first on CVE Vulnerability.

]]> An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary groups are used to set access permissions and is able to execute a binary code in that container.

The post CVE-2022-2990 appeared first on CVE Vulnerability.

]]>