Vulnerabilities > Incorrect Authorization
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-06-06 | CVE-2022-1944 | Incorrect Authorization vulnerability in Gitlab When the feature is configured, improper authorization in the Interactive Web Terminal in GitLab CE/EE affecting all versions from 11.3 prior to 14.9.5, 14.10 prior to 14.10.4, and 15.0 prior to 15.0.1 allows users with the Developer role to open terminals on other Developers' running jobs | 7.1 |
| 2022-05-30 | CVE-2022-1589 | Incorrect Authorization vulnerability in Change Wp-Admin Login Project Change Wp-Admin Login The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its settings, which could allow unauthenticated users to change the settings. | 7.5 |
| 2022-05-26 | CVE-2022-26767 | Incorrect Authorization vulnerability in Apple Macos The issue was addressed with additional permissions checks. | 5.5 |
| 2022-05-23 | CVE-2022-30016 | Incorrect Authorization vulnerability in Rescue Dispatch Management System Project Rescue Dispatch Management System 1.0 Rescue Dispatch Management System 1.0 is vulnerable to Incorrect Access Control via http://localhost/rdms/admin/?page=system_info. | 8.8 |
| 2022-05-19 | CVE-2022-22978 | Incorrect Authorization vulnerability in multiple products In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. | 9.8 |
| 2022-05-18 | CVE-2021-3956 | Incorrect Authorization vulnerability in Lenovo Xclarity Controller A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active Directory. | 5.3 |
| 2022-05-17 | CVE-2022-1706 | Incorrect Authorization vulnerability in multiple products A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. | 6.5 |
| 2022-05-17 | CVE-2022-1753 | Incorrect Authorization vulnerability in Wowonder A vulnerability, which was classified as critical, was found in WoWonder. | 4.3 |
| 2022-05-16 | CVE-2022-0574 | Incorrect Authorization vulnerability in Publify Project Publify Improper Access Control in GitHub repository publify/publify prior to 9.2.8. | 6.5 |
| 2022-05-16 | CVE-2022-1553 | Incorrect Authorization vulnerability in Publify Project Publify Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. | 4.9 |