Vulnerabilities > Improper Privilege Management
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-08-19 | CVE-2022-1901 | Improper Privilege Management vulnerability in Octopus Server In affected versions of Octopus Deploy it is possible to unmask sensitive variables by using variable preview. | 5.3 |
| 2022-08-18 | CVE-2022-2568 | Improper Privilege Management vulnerability in Redhat Ansible Automation Platform 2.0/2.1/2.2 A privilege escalation flaw was found in the Ansible Automation Platform. | 6.5 |
| 2022-08-18 | CVE-2022-37025 | Improper Privilege Management vulnerability in Mcafee Security Scan Plus An improper privilege management vulnerability in McAfee Security Scan Plus (MSS+) before 4.1.262.1 could allow a local user to modify a configuration file and perform a LOLBin (Living off the land) attack. | 7.8 |
| 2022-08-16 | CVE-2020-10728 | Improper Privilege Management vulnerability in Automationbroker APB A flaw was found in automationbroker/apb container in versions up to and including 2.0.4-1. | 7.8 |
| 2022-08-05 | CVE-2022-2498 | Improper Privilege Management vulnerability in Gitlab An issue in pipeline subscriptions in GitLab EE affecting all versions from 12.8 prior to 15.0.5, 15.1 prior to 15.1.4, and 15.2 prior to 15.2.1 triggered new pipelines with the person who created the tag as the pipeline creator instead of the subscription's author. | 7.5 |
| 2022-08-05 | CVE-2022-36833 | Improper Privilege Management vulnerability in Samsung Gameoptimizingservice Improper Privilege Management vulnerability in Game Optimizing Service prior to versions 3.3.04.0 in Android 10, and 3.5.04.8 in Android 11 and above allows local attacker to execute hidden function for developer by changing package name. | 7.8 |
| 2022-08-01 | CVE-2022-34338 | Improper Privilege Management vulnerability in IBM Robotic Process Automation IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could disclose sensitive information due to improper privilege management for storage provider types. | 6.5 |
| 2022-07-22 | CVE-2022-20906 | Improper Privilege Management vulnerability in Cisco Nexus Dashboard Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. | 6.7 |
| 2022-07-22 | CVE-2022-20907 | Improper Privilege Management vulnerability in Cisco Nexus Dashboard Multiple vulnerabilities in Cisco Nexus Dashboard could allow an authenticated, local attacker to elevate privileges on an affected device. | 6.7 |
| 2022-07-19 | CVE-2022-26113 | Improper Privilege Management vulnerability in Fortinet Forticlient An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.10 may allow a local attacker to perform an arbitrary file write on the system. | 7.1 |