Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2020-03-31 CVE-2020-5291 Improper Privilege Management vulnerability in multiple products
Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process keep running as root while being traceable.
7.8
2020-03-27 CVE-2020-10940 Improper Privilege Management vulnerability in Phoenixcontact products
Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.
local
low complexity
phoenixcontact CWE-269
7.8
2020-03-27 CVE-2015-8534 Improper Privilege Management vulnerability in Lenovo Solution Center 3.3.0001
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA.
local
low complexity
lenovo CWE-269
7.8
2020-03-27 CVE-2015-7334 Improper Privilege Management vulnerability in Lenovo System Update
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA.
local
low complexity
lenovo CWE-269
7.8
2020-03-27 CVE-2015-7333 Improper Privilege Management vulnerability in Lenovo System Update
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA.
local
low complexity
lenovo CWE-269
7.8
2020-03-23 CVE-2020-8873 Improper Privilege Management vulnerability in Parallels Desktop
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123.
local
low complexity
parallels CWE-269
6.7
2020-03-23 CVE-2020-10793 Improper Privilege Management vulnerability in Codeigniter
CodeIgniter through 4.0.0 allows remote attackers to gain privileges via a modified Email ID to the "Select Role of the User" page.
network
low complexity
codeigniter CWE-269
8.8
2020-03-20 CVE-2019-16071 Improper Privilege Management vulnerability in Netsas Enigma NMS 65.0.0
Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components.
network
low complexity
netsas CWE-269
8.8
2020-03-19 CVE-2020-3265 Improper Privilege Management vulnerability in Cisco Sd-Wan Firmware
A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system.
local
low complexity
cisco CWE-269
7.8
2020-03-17 CVE-2020-3950 Improper Privilege Management vulnerability in VMWare Fusion, Horizon Client and Remote Console
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries.
local
low complexity
vmware CWE-269
7.8