Vulnerabilities > Incorrect Authorization
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-05-18 | CVE-2021-3956 | Incorrect Authorization vulnerability in Lenovo Xclarity Controller A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active Directory. | 5.3 |
| 2022-05-17 | CVE-2022-1706 | Incorrect Authorization vulnerability in multiple products A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. | 6.5 |
| 2022-05-17 | CVE-2022-1753 | Incorrect Authorization vulnerability in Wowonder A vulnerability, which was classified as critical, was found in WoWonder. | 4.3 |
| 2022-05-16 | CVE-2022-0574 | Incorrect Authorization vulnerability in Publify Project Publify Improper Access Control in GitHub repository publify/publify prior to 9.2.8. | 6.5 |
| 2022-05-16 | CVE-2022-1553 | Incorrect Authorization vulnerability in Publify Project Publify Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. | 4.9 |
| 2022-05-13 | CVE-2022-29854 | Incorrect Authorization vulnerability in Mitel Minet Firmware 1.8.0.12 A vulnerability in Mitel 6900 Series IP (MiNet) phones excluding 6970, versions 1.8 (1.8.0.12) and earlier, could allow a unauthenticated attacker with physical access to the phone to gain root access due to insufficient access control for test functionality during system startup. | 6.8 |
| 2022-05-13 | CVE-2022-27134 | Incorrect Authorization vulnerability in B1 Eosio Batdappboomx 327C04Cf EOSIO batdappboomx v327c04cf has an Access-control vulnerability in the `transfer` function of the smart contract which allows remote attackers to win the cryptocurrency without paying ticket fee via the `std::string memo` parameter. | 7.5 |
| 2022-05-12 | CVE-2022-23139 | Incorrect Authorization vulnerability in ZTE Zxmp M721 Firmware 5.10.030.006 ZTE's ZXMP M721 product has a permission and access control vulnerability. | 8.8 |
| 2022-05-11 | CVE-2022-24584 | Incorrect Authorization vulnerability in Yubico OTP Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server. | 6.5 |
| 2022-05-11 | CVE-2022-1124 | Incorrect Authorization vulnerability in Gitlab An improper authorization issue has been discovered in GitLab CE/EE affecting all versions prior to 14.8.6, all versions from 14.9.0 prior to 14.9.4, and 14.10.0, allowing Guest project members to access trace log of jobs when it is enabled | 4.3 |