Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2020-05-19 CVE-2020-8021 Improper Privilege Management vulnerability in multiple products
a Improper Access Control vulnerability in of Open Build Service allows remote attackers to read files of an OBS package where the sourceaccess/access is disabled This issue affects: Open Build Service versions prior to 2.10.5.
network
low complexity
opensuse debian CWE-269
5.3
2020-05-18 CVE-2019-17066 Improper Privilege Management vulnerability in Ivanti Workspace Control
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries.
local
low complexity
ivanti CWE-269
7.8
2020-05-18 CVE-2020-12860 Improper Privilege Management vulnerability in Health Covidsafe 1.0.11/1.0.16
COVIDSafe through v1.0.17 allows a remote attacker to access phone name and model information because a BLE device can have four roles and COVIDSafe uses all of them.
network
low complexity
health CWE-269
5.3
2020-05-15 CVE-2020-12798 Improper Privilege Management vulnerability in Sun-Denshi Universal Forensic Extraction Device Firmware 5.0/7.5.0.845
Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog that is reachable via the Certificate-Based Authentication option of the Wireless Network Connection screen.
local
low complexity
sun-denshi CWE-269
7.8
2020-05-08 CVE-2020-7291 Improper Privilege Management vulnerability in Mcafee Active Response
Privilege Escalation vulnerability in McAfee Active Response (MAR) for Mac prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.
local
low complexity
mcafee CWE-269
7.8
2020-05-08 CVE-2020-7290 Improper Privilege Management vulnerability in Mcafee Active Response
Privilege Escalation vulnerability in McAfee Active Response (MAR) for Linux prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.
local
low complexity
mcafee CWE-269
7.8
2020-05-08 CVE-2020-7289 Improper Privilege Management vulnerability in Mcafee Active Response
Privilege Escalation vulnerability in McAfee Active Response (MAR) for Windows prior to 2.4.3 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.
local
low complexity
mcafee CWE-269
7.8
2020-05-08 CVE-2020-7288 Improper Privilege Management vulnerability in Mcafee Endpoint Detection and Response 3.1.0
Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Mac prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.
local
low complexity
mcafee CWE-269
7.8
2020-05-08 CVE-2020-7287 Improper Privilege Management vulnerability in Mcafee Endpoint Detection and Response 3.1.0
Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Linux prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.
local
low complexity
mcafee CWE-269
7.8
2020-05-08 CVE-2020-7286 Improper Privilege Management vulnerability in Mcafee Endpoint Detection and Response
Privilege Escalation vulnerability in McAfee Exploit Detection and Response (EDR) for Windows prior to 3.1.0 Hotfix 1 allows a malicious script or program to perform functions that the local executing user has not been granted access to.
local
low complexity
mcafee CWE-269
7.8