Vulnerabilities > Improper Privilege Management
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-04-19 | CVE-2022-0071 | Improper Privilege Management vulnerability in Hotdog Project Hotdog Incomplete fix for CVE-2021-3101. | 8.8 |
2022-04-15 | CVE-2022-20739 | Improper Privilege Management vulnerability in Cisco Catalyst Sd-Wan Manager and Sd-Wan Vmanage A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. | 7.3 |
2022-04-13 | CVE-2022-1332 | Improper Privilege Management vulnerability in Mattermost Server One of the API in Mattermost version 6.4.1 and earlier fails to properly protect the permissions, which allows the authenticated members with restricted custom admin role to bypass the restrictions and view the server logs and server config.json file contents. | 4.3 |
2022-04-12 | CVE-2022-23160 | Improper Privilege Management vulnerability in Dell EMC Powerscale Onefs Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. | 4.3 |
2022-04-12 | CVE-2021-39797 | Improper Privilege Management vulnerability in Google Android 12.0/12.1 In several functions of of LauncherApps.java, there is a possible escalation of privilege due to a logic error in the code. | 7.8 |
2022-04-12 | CVE-2021-39807 | Improper Privilege Management vulnerability in Google Android In handleNfcStateChanged of SecureNfcEnabler.java, there is a possible way to enable NFC from the Guest account due to a missing permission check. | 7.8 |
2022-04-11 | CVE-2022-22257 | Improper Privilege Management vulnerability in Huawei Emui, Harmonyos and Magic UI The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity. | 7.5 |
2022-04-08 | CVE-2021-36290 | Improper Privilege Management vulnerability in Dell EMC Unity Operating Environment Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. | 6.7 |
2022-04-08 | CVE-2021-36293 | Improper Privilege Management vulnerability in Dell EMC Unity Operating Environment Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. | 6.7 |
2022-04-06 | CVE-2022-20782 | Improper Privilege Management vulnerability in Cisco Identity Services Engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an affected device. | 6.5 |