Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2019-10-18 CVE-2019-15901 Improper Privilege Management vulnerability in Doas Project Doas
An issue was discovered in slicer69 doas before 6.2 on certain platforms other than OpenBSD.
network
low complexity
doas-project CWE-269
8.8
2019-10-17 CVE-2019-17631 Improper Privilege Management vulnerability in multiple products
From Eclipse OpenJ9 0.15 to 0.16, access to diagnostic operations such as causing a GC or creating a diagnostic file are permitted without any privilege checks.
network
low complexity
eclipse redhat CWE-269
critical
9.1
2019-10-14 CVE-2019-16519 Improper Privilege Management vulnerability in Eset products
ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks.
local
low complexity
eset CWE-269
7.8
2019-10-14 CVE-2019-9745 Improper Privilege Management vulnerability in Cloudcti HIP Integrator Recognition Configuration Tool
CloudCTI HIP Integrator Recognition Configuration Tool allows privilege escalation via its EXQUISE integration.
local
low complexity
cloudcti CWE-269
7.8
2019-10-14 CVE-2019-14838 Improper Privilege Management vulnerability in Redhat products
A flaw was found in wildfly-core before 7.2.5.GA.
network
low complexity
redhat CWE-269
4.9
2019-10-08 CVE-2018-21025 Improper Privilege Management vulnerability in Centreon VM 19.04.2/19.04.3
In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files.
network
low complexity
centreon CWE-269
critical
9.8
2019-10-07 CVE-2019-15747 Improper Privilege Management vulnerability in Sitos SIX 6.2.1
SITOS six Build v6.2.1 allows a user with the user role of Seminar Coordinator to escalate their permission to the Systemadministrator role due to insufficient checks on the server side.
network
low complexity
sitos CWE-269
8.8
2019-09-30 CVE-2019-4112 Improper Privilege Management vulnerability in IBM Websphere Extreme Scale
IBM WebSphere eXtreme Scale 8.6 Admin Console allows web pages to be stored locally which can be read by another user on the system.
local
low complexity
ibm CWE-269
3.3
2019-09-27 CVE-2018-9425 Improper Privilege Management vulnerability in Google Android 10.0
In Platform, there is a possible bypass of user interaction requirements due to missing permission checks.
local
low complexity
google CWE-269
7.8
2019-09-24 CVE-2019-14220 Improper Privilege Management vulnerability in Bluestacks
An issue was discovered in BlueStacks 4.110 and below on macOS and on 4.120 and below on Windows.
local
low complexity
bluestacks CWE-269
6.5