Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2023-02-07 CVE-2022-43759 Improper Privilege Management vulnerability in Suse Rancher
A Improper Privilege Management vulnerability in SUSE Rancher, allows users with access to the escalate verb on PRTBs to escalate permissions for any -promoted resource in any cluster.
network
low complexity
suse CWE-269
8.8
2023-02-06 CVE-2022-48019 Improper Privilege Management vulnerability in WFS Another Eden 2.14.200/3.0.20
The components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload.
local
low complexity
wfs CWE-269
7.8
2023-02-03 CVE-2023-20854 Improper Privilege Management vulnerability in VMWare Workstation 17.0
VMware Workstation contains an arbitrary file deletion vulnerability.
local
low complexity
vmware CWE-269
8.4
2023-02-02 CVE-2020-24307 Improper Privilege Management vulnerability in Mremoteng 1.76.20
An issue in mRemoteNG v1.76.20 allows attackers to escalate privileges via a crafted executable file.
local
low complexity
mremoteng CWE-269
7.8
2023-02-01 CVE-2022-45101 Improper Privilege Management vulnerability in Dell EMC Powerscale Onefs
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS.
network
low complexity
dell CWE-269
critical
9.8
2023-01-31 CVE-2022-4041 Improper Privilege Management vulnerability in Hitachi Storage Plug-In 04.8.0/04.9.0
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.1.
network
low complexity
hitachi CWE-269
8.8
2023-01-31 CVE-2022-4441 Improper Privilege Management vulnerability in Hitachi Storage Plug-In 04.8.0/04.9.0
Incorrect Privilege Assignment vulnerability in Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation. This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.9.0 before 04.9.1.
network
low complexity
hitachi CWE-269
8.8
2023-01-28 CVE-2023-23629 Improper Privilege Management vulnerability in Metabase
Metabase is an open source data analytics platform.
network
low complexity
metabase CWE-269
6.3
2023-01-20 CVE-2023-0101 Improper Privilege Management vulnerability in Tenable Nessus
A privilege escalation vulnerability was identified in Nessus versions 8.10.1 through 8.15.8 and 10.0.0 through 10.4.1.
network
low complexity
tenable CWE-269
8.8
2023-01-20 CVE-2023-22331 Improper Privilege Management vulnerability in Contec Conprosys HMI System
Use of default credentials vulnerability in CONPROSYS HMI System (CHS) Ver.3.4.5 and earlier allows a remote unauthenticated attacker to alter user credentials information.
network
low complexity
contec CWE-269
7.5